@kody-ade/kody-engine 0.4.203 → 0.4.204-next.10

package/dist/bin/kody.js

@@ -551,9 +551,11 @@ __export(dutyMcp_exports, {
   dispatchWorkflow: () => dispatchWorkflow,
   ensureComment: () => ensureComment,
   ensureIssue: () => ensureIssue,
+  isDispatchGated: () => isDispatchGated,
   parseDutyTrustMode: () => parseDutyTrustMode,
   readCheckRuns: () => readCheckRuns,
-  readDutyTrustMode: () => readDutyTrustMode
+  readDutyTrustMode: () => readDutyTrustMode,
+  readThread: () => readThread
 });
 import { createSdkMcpServer as createSdkMcpServer3, tool as tool3 } from "@anthropic-ai/claude-agent-sdk";
 import { z as z3 } from "zod";
@@ -665,6 +667,24 @@ function readDutyTrustMode(repoSlug, dutySlug) {
     return "ask";
   }
 }
+function readThread(repoSlug, number, limit = 10) {
+  const meta = JSON.parse(gh(["api", `repos/${repoSlug}/issues/${number}`]));
+  const rawComments = JSON.parse(
+    gh(["api", `repos/${repoSlug}/issues/${number}/comments?per_page=100`])
+  );
+  const comments = rawComments.slice(-Math.max(1, limit)).map((c) => ({
+    author: c.user?.login ?? "?",
+    createdAt: c.created_at ?? "",
+    body: (c.body ?? "").slice(0, THREAD_BODY_MAX)
+  }));
+  return {
+    number,
+    title: meta.title ?? "",
+    state: meta.state ?? "",
+    labels: (meta.labels ?? []).map((l) => l.name ?? "").filter(Boolean),
+    comments
+  };
+}
 function readCheckRuns(repoSlug, ref, ignoreNames) {
   const sha = gh(["api", `repos/${repoSlug}/commits/${ref}`, "--jq", ".sha"]).trim();
   const raw = gh([
@@ -723,6 +743,11 @@ function dispatchWorkflow(workflowFile, executable, issueNumber) {
     return { ok: false, error: err instanceof Error ? err.message : String(err) };
   }
 }
+function isDispatchGated(executable, mode) {
+  if (mode === "auto") return false;
+  if (executable && GATE_EXEMPT_EXECUTABLES.has(executable)) return false;
+  return true;
+}
 function trustRefusal(dutySlug) {
   return `Not dispatched: duty \`${dutySlug ?? "?"}\` is in ASK mode (not trusted for autonomy). Do NOT retry the dispatch. Instead notify the operator (use recommend_to_operator, or rely on the tracking issue that already @-mentions them), then submit_state. To let this duty act on its own, grant it Auto on the dashboard Trust page.`;
 }
@@ -751,7 +776,7 @@ function buildDutyMcpServer(opts) {
       pr: z3.number().int().positive().describe("PR number to repair.")
     },
     async (args) => {
-      if (readDutyTrustMode(opts.repoSlug, opts.dutySlug) !== "auto") {
+      if (isDispatchGated(verb, readDutyTrustMode(opts.repoSlug, opts.dutySlug))) {
         return { content: [{ type: "text", text: trustRefusal(opts.dutySlug) }] };
       }
       const result = dispatchVerb(workflowFile, verb, args.pr);
@@ -818,6 +843,18 @@ function buildDutyMcpServer(opts) {
       return { content: [{ type: "text", text: JSON.stringify(result, null, 2) }] };
     }
   );
+  const readThreadTool = tool3(
+    "read_thread",
+    "Read an issue or PR's recent comments + labels + title/state. Returns {number, title, state, labels:[...], comments:[{author, createdAt, body}]} (newest last, body truncated). Use this to read a verdict a dispatched check posted back \u2014 e.g. qa-engineer's report or ui-review's PASS/CONCERNS/FAIL \u2014 on a later tick. Read-only; works for both issues and PRs.",
+    {
+      number: z3.number().int().positive().describe("Issue or PR number to read."),
+      limit: z3.number().int().positive().optional().describe("Max recent comments to return (default 10).")
+    },
+    async (args) => {
+      const result = readThread(opts.repoSlug, args.number, args.limit ?? 10);
+      return { content: [{ type: "text", text: JSON.stringify(result, null, 2) }] };
+    }
+  );
   const ensureIssueTool = tool3(
     "ensure_issue",
     "Idempotently ensure ONE open tracking issue exists for `key`. Searches OPEN issues (issues API, not the laggy search index) for `key`'s hidden marker; if found, returns {created:false, number} and creates NOTHING; otherwise creates the issue (title + body, marker appended) and returns {created:true, number}. This is the anti-duplication primitive: use one stable `key` per recurring finding so re-ticks reuse the same issue. Only take follow-up actions (dispatch/comment) when created===true.",
@@ -856,7 +893,7 @@ function buildDutyMcpServer(opts) {
       issueNumber: z3.number().int().positive().describe("Issue (or PR) number forwarded as issue_number.")
     },
     async (args) => {
-      if (readDutyTrustMode(opts.repoSlug, opts.dutySlug) !== "auto") {
+      if (isDispatchGated(args.executable, readDutyTrustMode(opts.repoSlug, opts.dutySlug))) {
         return { content: [{ type: "text", text: trustRefusal(opts.dutySlug) }] };
       }
       const result = dispatchWorkflow(workflowFile, args.executable, args.issueNumber);
@@ -875,6 +912,7 @@ function buildDutyMcpServer(opts) {
       recommendTool,
       ledgerTool,
       checkRunsTool,
+      readThreadTool,
       ensureIssueTool,
       ensureCommentTool,
       dispatchTool
@@ -882,7 +920,7 @@ function buildDutyMcpServer(opts) {
   });
   return { server };
 }
-var FAIL_CONCLUSIONS, RUNNING_STATUSES, TRUST_FILE_PATH, TRUST_STATE_BRANCH, CHECK_FAIL_CONCLUSIONS, DEFAULT_IGNORE_CHECKS, trackMarker, commentMarker, DUTY_MCP_TOOL_NAMES;
+var FAIL_CONCLUSIONS, RUNNING_STATUSES, TRUST_FILE_PATH, TRUST_STATE_BRANCH, THREAD_BODY_MAX, CHECK_FAIL_CONCLUSIONS, DEFAULT_IGNORE_CHECKS, trackMarker, commentMarker, GATE_EXEMPT_EXECUTABLES, DUTY_MCP_TOOL_NAMES;
 var init_dutyMcp = __esm({
   "src/dutyMcp.ts"() {
     "use strict";
@@ -891,10 +929,12 @@ var init_dutyMcp = __esm({
     RUNNING_STATUSES = /* @__PURE__ */ new Set(["IN_PROGRESS", "QUEUED", "PENDING", "WAITING", "REQUESTED"]);
     TRUST_FILE_PATH = ".kody/state/trust.json";
     TRUST_STATE_BRANCH = "kody-state";
+    THREAD_BODY_MAX = 4e3;
     CHECK_FAIL_CONCLUSIONS = /* @__PURE__ */ new Set(["FAILURE", "TIMED_OUT", "STARTUP_FAILURE", "ACTION_REQUIRED"]);
     DEFAULT_IGNORE_CHECKS = ["run", "kody", "job-tick", "goal-tick", "worker-ask", "chat"];
     trackMarker = (key) => `<!-- kody-track:${key} -->`;
     commentMarker = (key) => `<!-- kody-track-comment:${key} -->`;
+    GATE_EXEMPT_EXECUTABLES = /* @__PURE__ */ new Set(["qa-engineer", "ui-review"]);
     DUTY_MCP_TOOL_NAMES = [
       "list_prs_to_repair",
       "sync_pr",
@@ -903,6 +943,7 @@ var init_dutyMcp = __esm({
       "recommend_to_operator",
       "read_ledger",
       "read_check_runs",
+      "read_thread",
       "ensure_issue",
       "ensure_comment",
       "dispatch_workflow"
@@ -1031,16 +1072,16 @@ var init_fetchRepoMcp = __esm({
 });
 
 // src/prompt.ts
-import * as fs15 from "fs";
-import * as path14 from "path";
+import * as fs17 from "fs";
+import * as path16 from "path";
 function loadProjectConventions(projectDir) {
   const out = [];
   for (const rel of CONVENTION_FILES) {
-    const abs = path14.join(projectDir, rel);
-    if (!fs15.existsSync(abs)) continue;
+    const abs = path16.join(projectDir, rel);
+    if (!fs17.existsSync(abs)) continue;
     let content;
     try {
-      content = fs15.readFileSync(abs, "utf-8");
+      content = fs17.readFileSync(abs, "utf-8");
     } catch {
       continue;
     }
@@ -1275,28 +1316,28 @@ var loadMemoryContext_exports = {};
 __export(loadMemoryContext_exports, {
   loadMemoryContext: () => loadMemoryContext
 });
-import * as fs16 from "fs";
-import * as path15 from "path";
+import * as fs18 from "fs";
+import * as path17 from "path";
 function collectPages(memoryAbs) {
   const out = [];
   walkMd(memoryAbs, (file) => {
     let stat;
     try {
-      stat = fs16.statSync(file);
+      stat = fs18.statSync(file);
     } catch {
       return;
     }
     let raw;
     try {
-      raw = fs16.readFileSync(file, "utf-8");
+      raw = fs18.readFileSync(file, "utf-8");
     } catch {
       return;
     }
     const fm = raw.match(/^---\s*\n([\s\S]*?)\n---/);
-    const title = fm?.[1]?.match(/^title:\s*(.+)$/m)?.[1]?.trim() ?? path15.basename(file, ".md");
+    const title = fm?.[1]?.match(/^title:\s*(.+)$/m)?.[1]?.trim() ?? path17.basename(file, ".md");
     const updated = fm?.[1]?.match(/^updated:\s*([0-9T:.+\-Z]+)/m)?.[1]?.trim() ?? "";
     out.push({
-      relPath: path15.relative(memoryAbs, file),
+      relPath: path17.relative(memoryAbs, file),
       title,
       updated,
       content: raw.length > PER_PAGE_MAX_BYTES ? raw.slice(0, PER_PAGE_MAX_BYTES) + TRUNCATED_SUFFIX2 : raw,
@@ -1364,16 +1405,16 @@ function walkMd(root, visit) {
     const dir = stack.pop();
     let names;
     try {
-      names = fs16.readdirSync(dir);
+      names = fs18.readdirSync(dir);
     } catch {
       continue;
     }
     for (const name of names) {
       if (name.startsWith(".")) continue;
-      const full = path15.join(dir, name);
+      const full = path17.join(dir, name);
       let stat;
       try {
-        stat = fs16.statSync(full);
+        stat = fs18.statSync(full);
       } catch {
         continue;
       }
@@ -1396,8 +1437,8 @@ var init_loadMemoryContext = __esm({
     TRUNCATED_SUFFIX2 = "\n\n\u2026 (truncated)";
     loadMemoryContext = async (ctx) => {
       if (typeof ctx.data.memoryContext === "string") return;
-      const memoryAbs = path15.join(ctx.cwd, MEMORY_DIR_RELATIVE);
-      if (!fs16.existsSync(memoryAbs)) {
+      const memoryAbs = path17.join(ctx.cwd, MEMORY_DIR_RELATIVE);
+      if (!fs18.existsSync(memoryAbs)) {
         ctx.data.memoryContext = "";
         return;
       }
@@ -1442,7 +1483,7 @@ var init_loadCoverageRules = __esm({
 // package.json
 var package_default = {
   name: "@kody-ade/kody-engine",
-  version: "0.4.203",
+  version: "0.4.204-next.10",
   description: "kody \u2014 autonomous development engine. Single-session Claude Code agent behind a generic executor + declarative executable profiles.",
   license: "MIT",
   type: "module",
@@ -1500,8 +1541,8 @@ var package_default = {
 
 // src/chat-cli.ts
 import { execFileSync as execFileSync29 } from "child_process";
-import * as fs44 from "fs";
-import * as path40 from "path";
+import * as fs45 from "fs";
+import * as path41 from "path";
 
 // src/chat/events.ts
 import * as fs from "fs";
@@ -2334,6 +2375,9 @@ function getExecutablesRoot() {
 function getProjectExecutablesRoot() {
   return path7.join(process.cwd(), ".kody", "executables");
 }
+function getProjectDutiesRoot() {
+  return path7.join(process.cwd(), ".kody", "duties");
+}
 function getBuiltinJobsRoot() {
   const here = path7.dirname(new URL(import.meta.url).pathname);
   const candidates = [
@@ -2361,7 +2405,7 @@ function listBuiltinJobs(root = getBuiltinJobsRoot()) {
   return out;
 }
 function getExecutableRoots() {
-  return [getProjectExecutablesRoot(), getExecutablesRoot()];
+  return [getProjectDutiesRoot(), getProjectExecutablesRoot(), getExecutablesRoot()];
 }
 function listExecutables(roots = getExecutableRoots()) {
   const rootList = typeof roots === "string" ? [roots] : roots;
@@ -3249,8 +3293,8 @@ async function emit2(sink, type, sessionId, suffix, payload) {
 
 // src/kody-cli.ts
 import { execFileSync as execFileSync28 } from "child_process";
-import * as fs43 from "fs";
-import * as path39 from "path";
+import * as fs44 from "fs";
+import * as path40 from "path";
 
 // src/app-auth.ts
 import { createSign } from "crypto";
@@ -3676,17 +3720,17 @@ function coerceBare(spec, value) {
 
 // src/executor.ts
 import { spawn as spawn10 } from "child_process";
-import * as fs42 from "fs";
-import * as path38 from "path";
+import * as fs43 from "fs";
+import * as path39 from "path";
 
 // src/container.ts
 init_events();
 import { execFileSync as execFileSync5 } from "child_process";
-import * as fs17 from "fs";
+import * as fs19 from "fs";
 
 // src/profile.ts
-import * as fs14 from "fs";
-import * as path13 from "path";
+import * as fs16 from "fs";
+import * as path15 from "path";
 
 // src/profile-error.ts
 var ProfileError = class extends Error {
@@ -3826,6 +3870,150 @@ function applyLifecycle(profile, profilePath) {
   expander(profile, profilePath);
 }
 
+// src/subagents.ts
+import * as fs15 from "fs";
+import * as path14 from "path";
+
+// src/scripts/buildSyntheticPlugin.ts
+import * as fs14 from "fs";
+import * as os2 from "os";
+import * as path13 from "path";
+function getPluginsCatalogRoot() {
+  const here = path13.dirname(new URL(import.meta.url).pathname);
+  const candidates = [
+    path13.join(here, "..", "plugins"),
+    // dev: src/scripts → src/plugins
+    path13.join(here, "..", "..", "plugins"),
+    // built: dist/scripts → dist/plugins
+    path13.join(here, "..", "..", "src", "plugins")
+    // fallback
+  ];
+  for (const c of candidates) {
+    if (fs14.existsSync(c) && fs14.statSync(c).isDirectory()) return c;
+  }
+  return candidates[0];
+}
+var buildSyntheticPlugin = async (ctx, profile) => {
+  const cc = profile.claudeCode;
+  const needsSynthetic = cc.skills.length > 0 || cc.commands.length > 0 || cc.hooks.length > 0;
+  if (!needsSynthetic) return;
+  const catalog = getPluginsCatalogRoot();
+  const runId = `${profile.name}-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`;
+  const root = path13.join(os2.tmpdir(), `kody-synth-${runId}`);
+  fs14.mkdirSync(path13.join(root, ".claude-plugin"), { recursive: true });
+  const resolvePart = (bucket, entry) => {
+    const local = path13.join(profile.dir, bucket, entry);
+    if (fs14.existsSync(local)) return local;
+    const central = path13.join(catalog, bucket, entry);
+    if (fs14.existsSync(central)) return central;
+    throw new Error(
+      `buildSyntheticPlugin: ${bucket} entry '${entry}' not found in executable dir (${profile.dir}/${bucket}/) or catalog (${catalog}/${bucket}/)`
+    );
+  };
+  if (cc.skills.length > 0) {
+    const dst = path13.join(root, "skills");
+    fs14.mkdirSync(dst, { recursive: true });
+    for (const name of cc.skills) {
+      copyDir(resolvePart("skills", name), path13.join(dst, name));
+    }
+  }
+  if (cc.commands.length > 0) {
+    const dst = path13.join(root, "commands");
+    fs14.mkdirSync(dst, { recursive: true });
+    for (const name of cc.commands) {
+      fs14.copyFileSync(resolvePart("commands", `${name}.md`), path13.join(dst, `${name}.md`));
+    }
+  }
+  if (cc.hooks.length > 0) {
+    const dst = path13.join(root, "hooks");
+    fs14.mkdirSync(dst, { recursive: true });
+    const merged = { hooks: {} };
+    for (const name of cc.hooks) {
+      const src = resolvePart("hooks", `${name}.json`);
+      const parsed = JSON.parse(fs14.readFileSync(src, "utf-8"));
+      for (const [event, entries] of Object.entries(parsed.hooks ?? {})) {
+        if (!Array.isArray(entries)) continue;
+        if (!merged.hooks[event]) merged.hooks[event] = [];
+        merged.hooks[event].push(...entries);
+      }
+    }
+    fs14.writeFileSync(path13.join(dst, "hooks.json"), `${JSON.stringify(merged, null, 2)}
+`);
+  }
+  const manifest = {
+    name: `kody-synth-${profile.name}`,
+    version: "1.0.0",
+    description: `Synthetic plugin assembled by Kody for profile '${profile.name}' at runtime.`
+  };
+  if (cc.skills.length > 0) manifest.skills = ["./skills/"];
+  if (cc.commands.length > 0) manifest.commands = ["./commands/"];
+  fs14.writeFileSync(path13.join(root, ".claude-plugin", "plugin.json"), `${JSON.stringify(manifest, null, 2)}
+`);
+  ctx.data.syntheticPluginPath = root;
+};
+function copyDir(src, dst) {
+  fs14.mkdirSync(dst, { recursive: true });
+  for (const ent of fs14.readdirSync(src, { withFileTypes: true })) {
+    const s = path13.join(src, ent.name);
+    const d = path13.join(dst, ent.name);
+    if (ent.isDirectory()) copyDir(s, d);
+    else if (ent.isFile()) fs14.copyFileSync(s, d);
+  }
+}
+
+// src/subagents.ts
+function splitFrontmatter(raw) {
+  const match = /^---\n([\s\S]*?)\n---\n?([\s\S]*)$/.exec(raw);
+  if (!match) return { fm: {}, body: raw.trim() };
+  const fm = {};
+  for (const line of match[1].split("\n")) {
+    const idx = line.indexOf(":");
+    if (idx === -1) continue;
+    fm[line.slice(0, idx).trim()] = line.slice(idx + 1).trim();
+  }
+  return { fm, body: (match[2] ?? "").trim() };
+}
+function resolveAgentFile(profileDir, name) {
+  const local = path14.join(profileDir, "agents", `${name}.md`);
+  if (fs15.existsSync(local)) return local;
+  const central = path14.join(getPluginsCatalogRoot(), "agents", `${name}.md`);
+  if (fs15.existsSync(central)) return central;
+  throw new Error(`loadSubagents: agent '${name}' not found in ${profileDir}/agents/ or shared catalog`);
+}
+function captureSubagentTemplates(profile) {
+  const names = profile.claudeCode.subagents;
+  if (!names || names.length === 0) return {};
+  const out = {};
+  for (const name of names) {
+    try {
+      out[name] = fs15.readFileSync(resolveAgentFile(profile.dir, name), "utf-8");
+    } catch {
+    }
+  }
+  return out;
+}
+function loadSubagents(profile) {
+  const names = profile.claudeCode.subagents;
+  if (!names || names.length === 0) return void 0;
+  const agents = {};
+  for (const name of names) {
+    const raw = profile.subagentTemplates?.[name] ?? fs15.readFileSync(resolveAgentFile(profile.dir, name), "utf-8");
+    const { fm, body } = splitFrontmatter(raw);
+    if (!body) throw new Error(`loadSubagents: agent '${name}' has an empty prompt body`);
+    const def = {
+      description: fm.description ?? `Subagent ${name}`,
+      prompt: body
+    };
+    if (fm.tools) {
+      const tools = fm.tools.split(",").map((t) => t.trim()).filter(Boolean);
+      if (tools.length > 0) def.tools = tools;
+    }
+    if (fm.model) def.model = fm.model;
+    agents[fm.name || name] = def;
+  }
+  return agents;
+}
+
 // src/profile.ts
 var VALID_INPUT_TYPES = /* @__PURE__ */ new Set(["int", "string", "bool", "enum"]);
 var VALID_PERMISSION_MODES = /* @__PURE__ */ new Set(["default", "acceptEdits", "plan", "bypassPermissions"]);
@@ -3834,6 +4022,10 @@ var VALID_CONTAINER_CHILD_TARGETS = /* @__PURE__ */ new Set(["issue", "pr"]);
 var VALID_PHASES = /* @__PURE__ */ new Set(["research", "planning", "implementing", "reviewing", "shipped", "failed", "idle"]);
 var KNOWN_PROFILE_KEYS = /* @__PURE__ */ new Set([
   "name",
+  "staff",
+  "every",
+  "dutyTools",
+  "mentions",
   "describe",
   "role",
   "kind",
@@ -3857,12 +4049,12 @@ var KNOWN_PROFILE_KEYS = /* @__PURE__ */ new Set([
   "preloadContext"
 ]);
 function loadProfile(profilePath) {
-  if (!fs14.existsSync(profilePath)) {
+  if (!fs16.existsSync(profilePath)) {
     throw new ProfileError(profilePath, "file not found");
   }
   let raw;
   try {
-    raw = JSON.parse(fs14.readFileSync(profilePath, "utf-8"));
+    raw = JSON.parse(fs16.readFileSync(profilePath, "utf-8"));
   } catch (err) {
     throw new ProfileError(profilePath, `invalid JSON: ${err instanceof Error ? err.message : String(err)}`);
   }
@@ -3873,7 +4065,7 @@ function loadProfile(profilePath) {
   const unknownKeys = Object.keys(r).filter((k) => !KNOWN_PROFILE_KEYS.has(k));
   if (unknownKeys.length > 0) {
     process.stderr.write(
-      `[kody profile] ${path13.basename(path13.dirname(profilePath))}: unknown top-level keys ignored: ${unknownKeys.join(", ")}
+      `[kody profile] ${path15.basename(path15.dirname(profilePath))}: unknown top-level keys ignored: ${unknownKeys.join(", ")}
 `
     );
   }
@@ -3913,6 +4105,13 @@ function loadProfile(profilePath) {
   const profile = {
     name: requireString(profilePath, r, "name"),
     describe: typeof r.describe === "string" ? r.describe : "",
+    // Optional persona to run as. Empty/blank string → undefined (no persona).
+    staff: typeof r.staff === "string" && r.staff.trim() ? r.staff.trim() : void 0,
+    // Optional recurrence cadence (scheduled duty). Blank → undefined (on-demand).
+    every: typeof r.every === "string" && r.every.trim() ? r.every.trim() : void 0,
+    // Locked-toolbox palette + mentions (folder-duty successors to frontmatter).
+    dutyTools: Array.isArray(r.dutyTools) ? r.dutyTools.map((t) => String(t).trim()).filter(Boolean) : void 0,
+    mentions: Array.isArray(r.mentions) ? r.mentions.map((m) => String(m).trim()).filter(Boolean) : void 0,
     role,
     kind,
     schedule: typeof r.schedule === "string" ? r.schedule : void 0,
@@ -3934,27 +4133,28 @@ function loadProfile(profilePath) {
     // Phase 5 in-process handoff opt-in. Default false; containers
     // flip to true after end-to-end verification.
     preloadContext: r.preloadContext === true,
-    dir: path13.dirname(profilePath),
-    promptTemplates: readPromptTemplates(path13.dirname(profilePath))
+    dir: path15.dirname(profilePath),
+    promptTemplates: readPromptTemplates(path15.dirname(profilePath))
   };
   if (lifecycle) {
     applyLifecycle(profile, profilePath);
   }
+  profile.subagentTemplates = captureSubagentTemplates(profile);
   return profile;
 }
 function readPromptTemplates(dir) {
   const out = {};
   const read = (p) => {
     try {
-      out[p] = fs14.readFileSync(p, "utf-8");
+      out[p] = fs16.readFileSync(p, "utf-8");
     } catch {
     }
   };
-  read(path13.join(dir, "prompt.md"));
+  read(path15.join(dir, "prompt.md"));
   try {
-    const promptsDir = path13.join(dir, "prompts");
-    for (const ent of fs14.readdirSync(promptsDir)) {
-      if (ent.endsWith(".md")) read(path13.join(promptsDir, ent));
+    const promptsDir = path15.join(dir, "prompts");
+    for (const ent of fs16.readdirSync(promptsDir)) {
+      if (ent.endsWith(".md")) read(path15.join(promptsDir, ent));
     }
   } catch {
   }
@@ -4294,16 +4494,17 @@ function parseStateComment(body) {
     flow: parsed.flow
   };
 }
-function reduce(state, executable, action, phase) {
+function reduce(state, executable, action, phase, staff) {
   if (!action) return state;
   const newAttempts = { ...state.core.attempts, [executable]: (state.core.attempts[executable] ?? 0) + 1 };
   const newExecutables = {
     ...state.executables,
     [executable]: { ...state.executables[executable] ?? { lastAction: null }, lastAction: action }
   };
+  const ranAsStaff = typeof staff === "string" && staff.length > 0 ? staff : void 0;
   const newHistory = [
     ...state.history,
-    { timestamp: action.timestamp, executable, action: action.type, note: noteFromAction(action) }
+    { timestamp: action.timestamp, executable, action: action.type, note: noteFromAction(action), staff: ranAsStaff }
   ].slice(-HISTORY_MAX_ENTRIES);
   return {
     schemaVersion: 1,
@@ -4312,6 +4513,7 @@ function reduce(state, executable, action, phase) {
       attempts: newAttempts,
       lastOutcome: action,
       currentExecutable: executable,
+      ranAsStaff: ranAsStaff ?? null,
       status: statusFromAction(action),
       phase: phaseFromAction(action, phase)
     },
@@ -4348,6 +4550,9 @@ function renderStateComment(state) {
   if (state.core.currentExecutable) {
     lines.push(`- **Last executable:** \`${state.core.currentExecutable}\``);
   }
+  if (state.core.ranAsStaff) {
+    lines.push(`- **Ran as:** \`${state.core.ranAsStaff}\``);
+  }
   if (state.core.lastOutcome) {
     lines.push(`- **Last action:** \`${state.core.lastOutcome.type}\``);
   }
@@ -4430,7 +4635,7 @@ var CONTAINER_MAX_ITERATIONS = 50;
 function getProfileInputsForChild(profileName, _cwd) {
   try {
     const profilePath = resolveProfilePath(profileName);
-    if (!fs17.existsSync(profilePath)) return null;
+    if (!fs19.existsSync(profilePath)) return null;
     return loadProfile(profilePath).inputs;
   } catch {
     return null;
@@ -4874,9 +5079,9 @@ function errMsg(err) {
 
 // src/litellm.ts
 import { execFileSync as execFileSync6, spawn as spawn3 } from "child_process";
-import * as fs18 from "fs";
-import * as os2 from "os";
-import * as path16 from "path";
+import * as fs20 from "fs";
+import * as os3 from "os";
+import * as path18 from "path";
 async function checkLitellmHealth(url) {
   try {
     const response = await fetch(`${url}/health`, { signal: AbortSignal.timeout(3e3) });
@@ -4928,13 +5133,13 @@ async function startLitellmIfNeeded(model, projectDir, url = LITELLM_DEFAULT_URL
   let child;
   let logPath;
   const spawnProxy = () => {
-    const configPath = path16.join(os2.tmpdir(), `kody-litellm-${Date.now()}.yaml`);
-    fs18.writeFileSync(configPath, generateLitellmConfigYaml(model));
+    const configPath = path18.join(os3.tmpdir(), `kody-litellm-${Date.now()}.yaml`);
+    fs20.writeFileSync(configPath, generateLitellmConfigYaml(model));
     const args = cmd === "litellm" ? ["--config", configPath, "--port", port] : ["-m", "litellm", "--config", configPath, "--port", port];
-    const nextLogPath = path16.join(os2.tmpdir(), `kody-litellm-${Date.now()}.log`);
-    const outFd = fs18.openSync(nextLogPath, "w");
+    const nextLogPath = path18.join(os3.tmpdir(), `kody-litellm-${Date.now()}.log`);
+    const outFd = fs20.openSync(nextLogPath, "w");
     child = spawn3(cmd, args, { stdio: ["ignore", outFd, outFd], detached: true, env: childEnv });
-    fs18.closeSync(outFd);
+    fs20.closeSync(outFd);
     logPath = nextLogPath;
   };
   const waitForHealth = async () => {
@@ -4948,7 +5153,7 @@ async function startLitellmIfNeeded(model, projectDir, url = LITELLM_DEFAULT_URL
   const readLogTail = () => {
     if (!logPath) return "";
     try {
-      return fs18.readFileSync(logPath, "utf-8").slice(-2e3);
+      return fs20.readFileSync(logPath, "utf-8").slice(-2e3);
     } catch {
       return "";
     }
@@ -5000,10 +5205,10 @@ ${tail}`
   return { url, kill: killChild, isHealthy, ensureHealthy };
 }
 function readDotenvApiKeys(projectDir) {
-  const dotenvPath = path16.join(projectDir, ".env");
-  if (!fs18.existsSync(dotenvPath)) return {};
+  const dotenvPath = path18.join(projectDir, ".env");
+  if (!fs20.existsSync(dotenvPath)) return {};
   const result = {};
-  for (const rawLine of fs18.readFileSync(dotenvPath, "utf-8").split("\n")) {
+  for (const rawLine of fs20.readFileSync(dotenvPath, "utf-8").split("\n")) {
     const line = rawLine.trim();
     if (!line || line.startsWith("#")) continue;
     const match = line.match(/^([A-Z_][A-Z0-9_]*_API_KEY)=(.*)$/);
@@ -5105,8 +5310,8 @@ function pushWithRetry(opts = {}) {
 }
 
 // src/commit.ts
-import * as fs19 from "fs";
-import * as path17 from "path";
+import * as fs21 from "fs";
+import * as path19 from "path";
 var FORBIDDEN_PATH_PREFIXES = [
   ".kody/",
   ".kody-engine/",
@@ -5167,18 +5372,18 @@ function tryGit(args, cwd) {
 }
 function abortUnfinishedGitOps(cwd) {
   const aborted = [];
-  const gitDir = path17.join(cwd ?? process.cwd(), ".git");
-  if (!fs19.existsSync(gitDir)) return aborted;
-  if (fs19.existsSync(path17.join(gitDir, "MERGE_HEAD"))) {
+  const gitDir = path19.join(cwd ?? process.cwd(), ".git");
+  if (!fs21.existsSync(gitDir)) return aborted;
+  if (fs21.existsSync(path19.join(gitDir, "MERGE_HEAD"))) {
     if (tryGit(["merge", "--abort"], cwd)) aborted.push("merge");
   }
-  if (fs19.existsSync(path17.join(gitDir, "CHERRY_PICK_HEAD"))) {
+  if (fs21.existsSync(path19.join(gitDir, "CHERRY_PICK_HEAD"))) {
     if (tryGit(["cherry-pick", "--abort"], cwd)) aborted.push("cherry-pick");
   }
-  if (fs19.existsSync(path17.join(gitDir, "REVERT_HEAD"))) {
+  if (fs21.existsSync(path19.join(gitDir, "REVERT_HEAD"))) {
     if (tryGit(["revert", "--abort"], cwd)) aborted.push("revert");
   }
-  if (fs19.existsSync(path17.join(gitDir, "rebase-merge")) || fs19.existsSync(path17.join(gitDir, "rebase-apply"))) {
+  if (fs21.existsSync(path19.join(gitDir, "rebase-merge")) || fs21.existsSync(path19.join(gitDir, "rebase-apply"))) {
     if (tryGit(["rebase", "--abort"], cwd)) aborted.push("rebase");
   }
   try {
@@ -5234,7 +5439,7 @@ function normalizeCommitMessage(raw) {
 function commitAndPush(branch, agentMessage, cwd) {
   const allChanged = listChangedFiles(cwd);
   const allowedFiles = allChanged.filter((f) => !isForbiddenPath(f));
-  const mergeHeadExists = fs19.existsSync(path17.join(cwd ?? process.cwd(), ".git", "MERGE_HEAD"));
+  const mergeHeadExists = fs21.existsSync(path19.join(cwd ?? process.cwd(), ".git", "MERGE_HEAD"));
   if (allowedFiles.length === 0 && !mergeHeadExists) {
     return { committed: false, pushed: false, sha: "", message: "" };
   }
@@ -5325,7 +5530,7 @@ var advanceFlow = async (ctx, profile) => {
   const action = ctx.data.action;
   let nextIssueState = issueState;
   if (targetType === "pr" && action) {
-    nextIssueState = reduce(issueState, profile.name, action, profile.phase);
+    nextIssueState = reduce(issueState, profile.name, action, profile.phase, profile.staff);
     if (state?.core.prUrl && !nextIssueState.core.prUrl) nextIssueState.core.prUrl = state.core.prUrl;
   }
   const prevHops = issueState.flow?.hops ?? flow.hops ?? 0;
@@ -5366,7 +5571,7 @@ var advanceFlow = async (ctx, profile) => {
 
 // src/gha.ts
 import { execFileSync as execFileSync10 } from "child_process";
-import * as fs20 from "fs";
+import * as fs22 from "fs";
 function getRunUrl() {
   const server = process.env.GITHUB_SERVER_URL;
   const repo = process.env.GITHUB_REPOSITORY;
@@ -5377,10 +5582,10 @@ function getRunUrl() {
 function reactToTriggerComment(cwd) {
   if (process.env.GITHUB_EVENT_NAME !== "issue_comment") return;
   const eventPath = process.env.GITHUB_EVENT_PATH;
-  if (!eventPath || !fs20.existsSync(eventPath)) return;
+  if (!eventPath || !fs22.existsSync(eventPath)) return;
   let event = null;
   try {
-    event = JSON.parse(fs20.readFileSync(eventPath, "utf-8"));
+    event = JSON.parse(fs22.readFileSync(eventPath, "utf-8"));
   } catch {
     return;
   }
@@ -5532,22 +5737,22 @@ var appendCompanyActivity = async (ctx, _profile, agentResult) => {
 };
 
 // src/scripts/brainServe.ts
-import * as fs22 from "fs";
+import * as fs24 from "fs";
 import { createServer } from "http";
-import * as path19 from "path";
+import * as path21 from "path";
 init_repoWorkspace();
 
 // src/scripts/brainTurnLog.ts
-import * as fs21 from "fs";
-import * as path18 from "path";
+import * as fs23 from "fs";
+import * as path20 from "path";
 var live = /* @__PURE__ */ new Map();
 function eventsPath(dir, chatId) {
-  return path18.join(dir, ".kody", "brain-events", `${chatId}.jsonl`);
+  return path20.join(dir, ".kody", "brain-events", `${chatId}.jsonl`);
 }
 function lastPersistedSeq(dir, chatId) {
   const p = eventsPath(dir, chatId);
-  if (!fs21.existsSync(p)) return 0;
-  const lines = fs21.readFileSync(p, "utf-8").split("\n").filter(Boolean);
+  if (!fs23.existsSync(p)) return 0;
+  const lines = fs23.readFileSync(p, "utf-8").split("\n").filter(Boolean);
   if (lines.length === 0) return 0;
   try {
     return JSON.parse(lines[lines.length - 1]).seq || 0;
@@ -5557,9 +5762,9 @@ function lastPersistedSeq(dir, chatId) {
 }
 function readSince(dir, chatId, since) {
   const p = eventsPath(dir, chatId);
-  if (!fs21.existsSync(p)) return [];
+  if (!fs23.existsSync(p)) return [];
   const out = [];
-  for (const line of fs21.readFileSync(p, "utf-8").split("\n")) {
+  for (const line of fs23.readFileSync(p, "utf-8").split("\n")) {
     if (!line) continue;
     try {
       const rec = JSON.parse(line);
@@ -5585,12 +5790,12 @@ function beginTurn(dir, chatId) {
   };
   live.set(chatId, state);
   const p = eventsPath(dir, chatId);
-  fs21.mkdirSync(path18.dirname(p), { recursive: true });
+  fs23.mkdirSync(path20.dirname(p), { recursive: true });
   return (event) => {
     state.seq += 1;
     const rec = { seq: state.seq, turn, ts: Date.now(), event };
     try {
-      fs21.appendFileSync(p, `${JSON.stringify(rec)}
+      fs23.appendFileSync(p, `${JSON.stringify(rec)}
 `);
     } catch (err) {
       process.stderr.write(
@@ -5629,7 +5834,7 @@ function endTurnIfUnterminated(dir, chatId, errMessage) {
     event: { type: "error", error: errMessage || "turn ended unexpectedly", chatId }
   };
   try {
-    fs21.appendFileSync(eventsPath(dir, chatId), `${JSON.stringify(rec)}
+    fs23.appendFileSync(eventsPath(dir, chatId), `${JSON.stringify(rec)}
 `);
   } catch {
   }
@@ -5860,7 +6065,7 @@ async function handleChatTurn(req, res, chatId, opts) {
   const repo = strField(body, "repo");
   const repoToken = strField(body, "repoToken");
   const sessionFile = sessionFilePath(opts.cwd, chatId);
-  fs22.mkdirSync(path19.dirname(sessionFile), { recursive: true });
+  fs24.mkdirSync(path21.dirname(sessionFile), { recursive: true });
   appendTurn(sessionFile, {
     role: "user",
     content: message,
@@ -5907,7 +6112,7 @@ async function handleChatTurn(req, res, chatId, opts) {
 function buildServer(opts) {
   const runTurn = opts.runTurn ?? runChatTurn;
   const cloneRepo = opts.cloneRepo ?? defaultCloneRepo;
-  const reposRoot = opts.reposRoot ?? path19.join(path19.dirname(path19.resolve(opts.cwd)), "repos");
+  const reposRoot = opts.reposRoot ?? path21.join(path21.dirname(path21.resolve(opts.cwd)), "repos");
   return createServer(async (req, res) => {
     if (!req.method || !req.url) {
       sendJson(res, 400, { error: "bad request" });
@@ -6008,93 +6213,6 @@ var brainServe = async (ctx) => {
   });
 };
 
-// src/scripts/buildSyntheticPlugin.ts
-import * as fs23 from "fs";
-import * as os3 from "os";
-import * as path20 from "path";
-function getPluginsCatalogRoot() {
-  const here = path20.dirname(new URL(import.meta.url).pathname);
-  const candidates = [
-    path20.join(here, "..", "plugins"),
-    // dev: src/scripts → src/plugins
-    path20.join(here, "..", "..", "plugins"),
-    // built: dist/scripts → dist/plugins
-    path20.join(here, "..", "..", "src", "plugins")
-    // fallback
-  ];
-  for (const c of candidates) {
-    if (fs23.existsSync(c) && fs23.statSync(c).isDirectory()) return c;
-  }
-  return candidates[0];
-}
-var buildSyntheticPlugin = async (ctx, profile) => {
-  const cc = profile.claudeCode;
-  const needsSynthetic = cc.skills.length > 0 || cc.commands.length > 0 || cc.hooks.length > 0;
-  if (!needsSynthetic) return;
-  const catalog = getPluginsCatalogRoot();
-  const runId = `${profile.name}-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`;
-  const root = path20.join(os3.tmpdir(), `kody-synth-${runId}`);
-  fs23.mkdirSync(path20.join(root, ".claude-plugin"), { recursive: true });
-  const resolvePart = (bucket, entry) => {
-    const local = path20.join(profile.dir, bucket, entry);
-    if (fs23.existsSync(local)) return local;
-    const central = path20.join(catalog, bucket, entry);
-    if (fs23.existsSync(central)) return central;
-    throw new Error(
-      `buildSyntheticPlugin: ${bucket} entry '${entry}' not found in executable dir (${profile.dir}/${bucket}/) or catalog (${catalog}/${bucket}/)`
-    );
-  };
-  if (cc.skills.length > 0) {
-    const dst = path20.join(root, "skills");
-    fs23.mkdirSync(dst, { recursive: true });
-    for (const name of cc.skills) {
-      copyDir(resolvePart("skills", name), path20.join(dst, name));
-    }
-  }
-  if (cc.commands.length > 0) {
-    const dst = path20.join(root, "commands");
-    fs23.mkdirSync(dst, { recursive: true });
-    for (const name of cc.commands) {
-      fs23.copyFileSync(resolvePart("commands", `${name}.md`), path20.join(dst, `${name}.md`));
-    }
-  }
-  if (cc.hooks.length > 0) {
-    const dst = path20.join(root, "hooks");
-    fs23.mkdirSync(dst, { recursive: true });
-    const merged = { hooks: {} };
-    for (const name of cc.hooks) {
-      const src = resolvePart("hooks", `${name}.json`);
-      const parsed = JSON.parse(fs23.readFileSync(src, "utf-8"));
-      for (const [event, entries] of Object.entries(parsed.hooks ?? {})) {
-        if (!Array.isArray(entries)) continue;
-        if (!merged.hooks[event]) merged.hooks[event] = [];
-        merged.hooks[event].push(...entries);
-      }
-    }
-    fs23.writeFileSync(path20.join(dst, "hooks.json"), `${JSON.stringify(merged, null, 2)}
-`);
-  }
-  const manifest = {
-    name: `kody-synth-${profile.name}`,
-    version: "1.0.0",
-    description: `Synthetic plugin assembled by Kody for profile '${profile.name}' at runtime.`
-  };
-  if (cc.skills.length > 0) manifest.skills = ["./skills/"];
-  if (cc.commands.length > 0) manifest.commands = ["./commands/"];
-  fs23.writeFileSync(path20.join(root, ".claude-plugin", "plugin.json"), `${JSON.stringify(manifest, null, 2)}
-`);
-  ctx.data.syntheticPluginPath = root;
-};
-function copyDir(src, dst) {
-  fs23.mkdirSync(dst, { recursive: true });
-  for (const ent of fs23.readdirSync(src, { withFileTypes: true })) {
-    const s = path20.join(src, ent.name);
-    const d = path20.join(dst, ent.name);
-    if (ent.isDirectory()) copyDir(s, d);
-    else if (ent.isFile()) fs23.copyFileSync(s, d);
-  }
-}
-
 // src/coverage.ts
 import { execFileSync as execFileSync11 } from "child_process";
 function patternToRegex(pattern) {
@@ -6243,13 +6361,13 @@ function defaultLabelMap() {
 }
 
 // src/scripts/commitAndPush.ts
-import * as fs24 from "fs";
-import * as path21 from "path";
+import * as fs25 from "fs";
+import * as path22 from "path";
 init_events();
 var DEFAULT_COMMIT_MESSAGE = "chore: kody changes";
 function sentinelPathForStage(cwd, profileName) {
   const runId = resolveRunId();
-  return path21.join(cwd, ".kody", "runs", runId, `commit-${profileName}.lock`);
+  return path22.join(cwd, ".kody", "runs", runId, `commit-${profileName}.lock`);
 }
 var commitAndPush2 = async (ctx, profile) => {
   const branch = ctx.data.branch;
@@ -6259,9 +6377,9 @@ var commitAndPush2 = async (ctx, profile) => {
   }
   const idempotencyEnabled = process.env.KODY_COMMIT_IDEMPOTENCY !== "0";
   const sentinel = idempotencyEnabled ? sentinelPathForStage(ctx.cwd, profile.name) : null;
-  if (sentinel && fs24.existsSync(sentinel)) {
+  if (sentinel && fs25.existsSync(sentinel)) {
     try {
-      const replay = JSON.parse(fs24.readFileSync(sentinel, "utf-8"));
+      const replay = JSON.parse(fs25.readFileSync(sentinel, "utf-8"));
       ctx.data.commitResult = replay.commitResult ?? { committed: false, pushed: false };
       if (Array.isArray(replay.changedFiles)) ctx.data.changedFiles = replay.changedFiles;
       if (typeof replay.hasCommitsAhead === "boolean") ctx.data.hasCommitsAhead = replay.hasCommitsAhead;
@@ -6314,8 +6432,8 @@ var commitAndPush2 = async (ctx, profile) => {
   const result = ctx.data.commitResult;
   if (sentinel && result?.committed) {
     try {
-      fs24.mkdirSync(path21.dirname(sentinel), { recursive: true });
-      fs24.writeFileSync(
+      fs25.mkdirSync(path22.dirname(sentinel), { recursive: true });
+      fs25.writeFileSync(
         sentinel,
         JSON.stringify(
           {
@@ -6338,14 +6456,14 @@ var commitAndPush2 = async (ctx, profile) => {
 init_issue();
 
 // src/goal/state.ts
-import * as fs25 from "fs";
-import * as path22 from "path";
+import * as fs26 from "fs";
+import * as path23 from "path";
 var VALID_STATES = /* @__PURE__ */ new Set(["active", "abandoned", "closed", "awaiting-merge", "done"]);
 var GoalStateError = class extends Error {
-  constructor(path41, message) {
-    super(`Invalid goal state at ${path41}:
+  constructor(path42, message) {
+    super(`Invalid goal state at ${path42}:
   ${message}`);
-    this.path = path41;
+    this.path = path42;
     this.name = "GoalStateError";
   }
   path;
@@ -6485,16 +6603,16 @@ function describeCommitMessage(goal) {
 }
 
 // src/scripts/composePrompt.ts
-import * as fs26 from "fs";
-import * as path23 from "path";
+import * as fs27 from "fs";
+import * as path24 from "path";
 var MUSTACHE = /\{\{\s*([a-zA-Z0-9_.-]+)\s*\}\}/g;
 var composePrompt = async (ctx, profile) => {
   const explicit = ctx.data.promptTemplate;
   const mode = ctx.args.mode;
   const candidates = [
-    explicit ? path23.join(profile.dir, explicit) : null,
-    mode ? path23.join(profile.dir, "prompts", `${mode}.md`) : null,
-    path23.join(profile.dir, "prompt.md")
+    explicit ? path24.join(profile.dir, explicit) : null,
+    mode ? path24.join(profile.dir, "prompts", `${mode}.md`) : null,
+    path24.join(profile.dir, "prompt.md")
   ].filter(Boolean);
   let templatePath = "";
   let template = "";
@@ -6507,7 +6625,7 @@ var composePrompt = async (ctx, profile) => {
       break;
     }
     try {
-      template = fs26.readFileSync(c, "utf-8");
+      template = fs27.readFileSync(c, "utf-8");
       templatePath = c;
       break;
     } catch (err) {
@@ -6518,7 +6636,7 @@ var composePrompt = async (ctx, profile) => {
   if (!templatePath) {
     let dirState;
     try {
-      dirState = `dir contents: [${fs26.readdirSync(profile.dir).join(", ")}]`;
+      dirState = `dir contents: [${fs27.readdirSync(profile.dir).join(", ")}]`;
     } catch (err) {
       dirState = `readdir(${profile.dir}) failed: ${err?.code ?? String(err)}`;
     }
@@ -7343,15 +7461,15 @@ var deriveQaScopeFromIssue = async (ctx) => {
 
 // src/scripts/diagMcp.ts
 import { execFileSync as execFileSync12 } from "child_process";
-import * as fs27 from "fs";
+import * as fs28 from "fs";
 import * as os4 from "os";
-import * as path24 from "path";
+import * as path25 from "path";
 var diagMcp = async (_ctx) => {
   const home = os4.homedir();
-  const cacheDir = path24.join(home, ".cache", "ms-playwright");
+  const cacheDir = path25.join(home, ".cache", "ms-playwright");
   let entries = [];
   try {
-    entries = fs27.readdirSync(cacheDir);
+    entries = fs28.readdirSync(cacheDir);
   } catch {
   }
   const hasChromium = entries.some((e) => e.startsWith("chromium"));
@@ -7377,17 +7495,17 @@ var diagMcp = async (_ctx) => {
 };
 
 // src/scripts/discoverQaContext.ts
-import * as fs29 from "fs";
-import * as path26 from "path";
+import * as fs30 from "fs";
+import * as path27 from "path";
 
 // src/scripts/frameworkDetectors.ts
-import * as fs28 from "fs";
-import * as path25 from "path";
+import * as fs29 from "fs";
+import * as path26 from "path";
 function detectFrameworks(cwd) {
   const out = [];
   let deps = {};
   try {
-    const pkg = JSON.parse(fs28.readFileSync(path25.join(cwd, "package.json"), "utf-8"));
+    const pkg = JSON.parse(fs29.readFileSync(path26.join(cwd, "package.json"), "utf-8"));
     deps = { ...pkg.dependencies, ...pkg.devDependencies };
   } catch {
     return out;
@@ -7424,7 +7542,7 @@ function detectFrameworks(cwd) {
 }
 function findFile(cwd, candidates) {
   for (const c of candidates) {
-    if (fs28.existsSync(path25.join(cwd, c))) return c;
+    if (fs29.existsSync(path26.join(cwd, c))) return c;
   }
   return null;
 }
@@ -7437,18 +7555,18 @@ var COLLECTION_DIRS = [
 function discoverPayloadCollections(cwd) {
   const out = [];
   for (const dir of COLLECTION_DIRS) {
-    const full = path25.join(cwd, dir);
-    if (!fs28.existsSync(full)) continue;
+    const full = path26.join(cwd, dir);
+    if (!fs29.existsSync(full)) continue;
     let files;
     try {
-      files = fs28.readdirSync(full).filter((f) => f.endsWith(".ts") || f.endsWith(".tsx"));
+      files = fs29.readdirSync(full).filter((f) => f.endsWith(".ts") || f.endsWith(".tsx"));
     } catch {
       continue;
     }
     for (const file of files) {
       try {
-        const filePath = path25.join(full, file);
-        const content = fs28.readFileSync(filePath, "utf-8").slice(0, 1e4);
+        const filePath = path26.join(full, file);
+        const content = fs29.readFileSync(filePath, "utf-8").slice(0, 1e4);
         const slugMatch = content.match(/slug:\s*['"]([a-z0-9-]+)['"]/);
         if (!slugMatch) continue;
         const slug = slugMatch[1];
@@ -7462,7 +7580,7 @@ function discoverPayloadCollections(cwd) {
         out.push({
           name,
           slug,
-          filePath: path25.relative(cwd, filePath),
+          filePath: path26.relative(cwd, filePath),
           fields: fields.slice(0, 20),
           hasAdmin
         });
@@ -7476,28 +7594,28 @@ var ADMIN_COMPONENT_DIRS = ["src/ui/admin", "src/admin/components", "src/compone
 function discoverAdminComponents(cwd, collections) {
   const out = [];
   for (const dir of ADMIN_COMPONENT_DIRS) {
-    const full = path25.join(cwd, dir);
-    if (!fs28.existsSync(full)) continue;
+    const full = path26.join(cwd, dir);
+    if (!fs29.existsSync(full)) continue;
     let entries;
     try {
-      entries = fs28.readdirSync(full, { withFileTypes: true });
+      entries = fs29.readdirSync(full, { withFileTypes: true });
     } catch {
       continue;
     }
     for (const entry of entries) {
-      const entryPath = path25.join(full, entry.name);
+      const entryPath = path26.join(full, entry.name);
       let name;
       let filePath;
       if (entry.isDirectory()) {
         const indexFile = ["index.tsx", "index.ts", "index.jsx", "index.js"].find(
-          (f) => fs28.existsSync(path25.join(entryPath, f))
+          (f) => fs29.existsSync(path26.join(entryPath, f))
         );
         if (!indexFile) continue;
         name = entry.name;
-        filePath = path25.relative(cwd, path25.join(entryPath, indexFile));
+        filePath = path26.relative(cwd, path26.join(entryPath, indexFile));
       } else if (/\.(tsx?|jsx?)$/.test(entry.name)) {
         name = entry.name.replace(/\.(tsx?|jsx?)$/, "");
-        filePath = path25.relative(cwd, entryPath);
+        filePath = path26.relative(cwd, entryPath);
       } else {
         continue;
       }
@@ -7505,7 +7623,7 @@ function discoverAdminComponents(cwd, collections) {
       if (collections) {
         for (const col of collections) {
           try {
-            const colContent = fs28.readFileSync(path25.join(cwd, col.filePath), "utf-8");
+            const colContent = fs29.readFileSync(path26.join(cwd, col.filePath), "utf-8");
             if (colContent.includes(name)) {
               usedInCollection = col.slug;
               break;
@@ -7524,8 +7642,8 @@ function scanApiRoutes(cwd) {
   const out = [];
   const appDirs = ["src/app", "app"];
   for (const appDir of appDirs) {
-    const apiDir = path25.join(cwd, appDir, "api");
-    if (!fs28.existsSync(apiDir)) continue;
+    const apiDir = path26.join(cwd, appDir, "api");
+    if (!fs29.existsSync(apiDir)) continue;
     walkApiRoutes(apiDir, "/api", cwd, out);
     break;
   }
@@ -7534,14 +7652,14 @@ function scanApiRoutes(cwd) {
 function walkApiRoutes(dir, prefix, cwd, out) {
   let entries;
   try {
-    entries = fs28.readdirSync(dir, { withFileTypes: true });
+    entries = fs29.readdirSync(dir, { withFileTypes: true });
   } catch {
     return;
   }
   const routeFile = entries.find((e) => e.isFile() && /^route\.(ts|js|tsx|jsx)$/.test(e.name));
   if (routeFile) {
     try {
-      const content = fs28.readFileSync(path25.join(dir, routeFile.name), "utf-8").slice(0, 5e3);
+      const content = fs29.readFileSync(path26.join(dir, routeFile.name), "utf-8").slice(0, 5e3);
       const methods = HTTP_METHODS.filter(
         (m) => new RegExp(`export\\s+(?:async\\s+)?function\\s+${m}\\b`).test(content)
       );
@@ -7549,7 +7667,7 @@ function walkApiRoutes(dir, prefix, cwd, out) {
         out.push({
           path: prefix,
           methods,
-          filePath: path25.relative(cwd, path25.join(dir, routeFile.name))
+          filePath: path26.relative(cwd, path26.join(dir, routeFile.name))
         });
       }
     } catch {
@@ -7560,7 +7678,7 @@ function walkApiRoutes(dir, prefix, cwd, out) {
     if (entry.name === "node_modules" || entry.name === ".next") continue;
     let segment = entry.name;
     if (segment.startsWith("(") && segment.endsWith(")")) {
-      walkApiRoutes(path25.join(dir, entry.name), prefix, cwd, out);
+      walkApiRoutes(path26.join(dir, entry.name), prefix, cwd, out);
       continue;
     }
     if (segment.startsWith("[[") && segment.endsWith("]]")) {
@@ -7568,7 +7686,7 @@ function walkApiRoutes(dir, prefix, cwd, out) {
     } else if (segment.startsWith("[") && segment.endsWith("]")) {
       segment = `:${segment.slice(1, -1)}`;
     }
-    walkApiRoutes(path25.join(dir, entry.name), `${prefix}/${segment}`, cwd, out);
+    walkApiRoutes(path26.join(dir, entry.name), `${prefix}/${segment}`, cwd, out);
   }
 }
 var BUILTIN_ENV_VARS = /* @__PURE__ */ new Set([
@@ -7588,10 +7706,10 @@ var BUILTIN_ENV_VARS = /* @__PURE__ */ new Set([
 function scanEnvVars(cwd) {
   const candidates = [".env.example", ".env.local.example", ".env.template"];
   for (const envFile of candidates) {
-    const envPath = path25.join(cwd, envFile);
-    if (!fs28.existsSync(envPath)) continue;
+    const envPath = path26.join(cwd, envFile);
+    if (!fs29.existsSync(envPath)) continue;
     try {
-      const content = fs28.readFileSync(envPath, "utf-8");
+      const content = fs29.readFileSync(envPath, "utf-8");
       const vars = [];
       for (const line of content.split("\n")) {
         const trimmed = line.trim();
@@ -7639,9 +7757,9 @@ function runQaDiscovery(cwd) {
 }
 function detectDevServer(cwd, out) {
   try {
-    const pkg = JSON.parse(fs29.readFileSync(path26.join(cwd, "package.json"), "utf-8"));
+    const pkg = JSON.parse(fs30.readFileSync(path27.join(cwd, "package.json"), "utf-8"));
     const allDeps = { ...pkg.dependencies, ...pkg.devDependencies };
-    const pm = fs29.existsSync(path26.join(cwd, "pnpm-lock.yaml")) ? "pnpm" : fs29.existsSync(path26.join(cwd, "yarn.lock")) ? "yarn" : fs29.existsSync(path26.join(cwd, "bun.lockb")) ? "bun" : "npm";
+    const pm = fs30.existsSync(path27.join(cwd, "pnpm-lock.yaml")) ? "pnpm" : fs30.existsSync(path27.join(cwd, "yarn.lock")) ? "yarn" : fs30.existsSync(path27.join(cwd, "bun.lockb")) ? "bun" : "npm";
     if (pkg.scripts?.dev) out.devCommand = `${pm} dev`;
     if (allDeps.next || allDeps.nuxt) out.devPort = 3e3;
     else if (allDeps.vite) out.devPort = 5173;
@@ -7651,8 +7769,8 @@ function detectDevServer(cwd, out) {
 function scanFrontendRoutes(cwd, out) {
   const appDirs = ["src/app", "app"];
   for (const appDir of appDirs) {
-    const full = path26.join(cwd, appDir);
-    if (!fs29.existsSync(full)) continue;
+    const full = path27.join(cwd, appDir);
+    if (!fs30.existsSync(full)) continue;
     walkFrontendRoutes(full, "", out);
     break;
   }
@@ -7660,7 +7778,7 @@ function scanFrontendRoutes(cwd, out) {
 function walkFrontendRoutes(dir, prefix, out) {
   let entries;
   try {
-    entries = fs29.readdirSync(dir, { withFileTypes: true });
+    entries = fs30.readdirSync(dir, { withFileTypes: true });
   } catch {
     return;
   }
@@ -7677,7 +7795,7 @@ function walkFrontendRoutes(dir, prefix, out) {
     if (entry.name === "node_modules" || entry.name === ".next") continue;
     let segment = entry.name;
     if (segment.startsWith("(") && segment.endsWith(")")) {
-      walkFrontendRoutes(path26.join(dir, entry.name), prefix, out);
+      walkFrontendRoutes(path27.join(dir, entry.name), prefix, out);
       continue;
     }
     if (segment.startsWith("[[") && segment.endsWith("]]")) {
@@ -7685,7 +7803,7 @@ function walkFrontendRoutes(dir, prefix, out) {
     } else if (segment.startsWith("[") && segment.endsWith("]")) {
       segment = `:${segment.slice(1, -1)}`;
     }
-    walkFrontendRoutes(path26.join(dir, entry.name), `${prefix}/${segment}`, out);
+    walkFrontendRoutes(path27.join(dir, entry.name), `${prefix}/${segment}`, out);
   }
 }
 function detectAuthFiles(cwd, out) {
@@ -7702,23 +7820,23 @@ function detectAuthFiles(cwd, out) {
     "src/app/api/oauth"
   ];
   for (const c of candidates) {
-    if (fs29.existsSync(path26.join(cwd, c))) out.authFiles.push(c);
+    if (fs30.existsSync(path27.join(cwd, c))) out.authFiles.push(c);
   }
 }
 function detectRoles(cwd, out) {
   const rolePaths = ["src/types", "src/lib", "src/utils", "src/constants", "src/access", "src/collections"];
   for (const rp of rolePaths) {
-    const dir = path26.join(cwd, rp);
-    if (!fs29.existsSync(dir)) continue;
+    const dir = path27.join(cwd, rp);
+    if (!fs30.existsSync(dir)) continue;
     let files;
     try {
-      files = fs29.readdirSync(dir).filter((f) => f.endsWith(".ts") || f.endsWith(".tsx"));
+      files = fs30.readdirSync(dir).filter((f) => f.endsWith(".ts") || f.endsWith(".tsx"));
     } catch {
       continue;
     }
     for (const f of files) {
       try {
-        const content = fs29.readFileSync(path26.join(dir, f), "utf-8").slice(0, 5e3);
+        const content = fs30.readFileSync(path27.join(dir, f), "utf-8").slice(0, 5e3);
         const roleMatches = content.match(/(?:role|Role|ROLE)\s*[=:]\s*['"](\w+)['"]/g);
         if (roleMatches) {
           for (const m of roleMatches) {
@@ -7901,8 +8019,8 @@ ${stateBody}`;
 };
 
 // src/scripts/dispatchJobFileTicks.ts
-import * as fs31 from "fs";
-import * as path28 from "path";
+import * as fs32 from "fs";
+import * as path29 from "path";
 
 // src/scripts/jobFrontmatter.ts
 var SCHEDULE_EVERY_VALUES = [
@@ -7918,7 +8036,7 @@ var SCHEDULE_EVERY_VALUES = [
   "manual"
 ];
 var FRONTMATTER_RE = /^---\r?\n([\s\S]*?)\r?\n---\r?\n?/;
-function splitFrontmatter(raw) {
+function splitFrontmatter2(raw) {
   const match = FRONTMATTER_RE.exec(raw);
   if (!match) return { frontmatter: {}, body: raw };
   const inner = match[1] ?? "";
@@ -8195,8 +8313,8 @@ function isShaConflict(err) {
 }
 
 // src/scripts/jobState/localFileBackend.ts
-import * as fs30 from "fs";
-import * as path27 from "path";
+import * as fs31 from "fs";
+import * as path28 from "path";
 var LocalFileBackend = class {
   name = "local-file";
   cwd;
@@ -8211,7 +8329,7 @@ var LocalFileBackend = class {
     if (!opts.owner || !opts.repo) throw new Error("LocalFileBackend: owner and repo are required");
     this.cwd = opts.cwd;
     this.jobsDir = opts.jobsDir;
-    this.absDir = path27.join(opts.cwd, opts.jobsDir);
+    this.absDir = path28.join(opts.cwd, opts.jobsDir);
     this.owner = opts.owner;
     this.repo = opts.repo;
     this.cache = opts.cache ?? defaultCacheAdapter();
@@ -8226,7 +8344,7 @@ var LocalFileBackend = class {
 `);
       return;
     }
-    fs30.mkdirSync(this.absDir, { recursive: true });
+    fs31.mkdirSync(this.absDir, { recursive: true });
     const prefix = this.cacheKeyPrefix();
     const probeKey = `${prefix}probe-${Date.now()}`;
     try {
@@ -8255,7 +8373,7 @@ var LocalFileBackend = class {
 `);
       return;
     }
-    if (!fs30.existsSync(this.absDir)) {
+    if (!fs31.existsSync(this.absDir)) {
       return;
     }
     const key = `${this.cacheKeyPrefix()}${process.env.GITHUB_RUN_ID ?? "norunid"}-${Date.now()}`;
@@ -8271,11 +8389,11 @@ var LocalFileBackend = class {
   }
   load(slug) {
     const relPath = stateFilePath(this.jobsDir, slug);
-    const absPath = path27.join(this.cwd, relPath);
-    if (!fs30.existsSync(absPath)) {
+    const absPath = path28.join(this.cwd, relPath);
+    if (!fs31.existsSync(absPath)) {
       return { path: relPath, handle: null, state: initialStateEnvelope("seed"), created: true };
     }
-    const raw = fs30.readFileSync(absPath, "utf-8");
+    const raw = fs31.readFileSync(absPath, "utf-8");
     let parsed;
     try {
       parsed = JSON.parse(raw);
@@ -8292,13 +8410,13 @@ var LocalFileBackend = class {
     if (!loaded.created && isStateUnchanged(loaded.state, next)) {
       return false;
     }
-    const absPath = path27.join(this.cwd, loaded.path);
-    fs30.mkdirSync(path27.dirname(absPath), { recursive: true });
+    const absPath = path28.join(this.cwd, loaded.path);
+    fs31.mkdirSync(path28.dirname(absPath), { recursive: true });
     const body = `${JSON.stringify(next, null, 2)}
 `;
     const tmpPath = `${absPath}.${process.pid}.tmp`;
-    fs30.writeFileSync(tmpPath, body, "utf-8");
-    fs30.renameSync(tmpPath, absPath);
+    fs31.writeFileSync(tmpPath, body, "utf-8");
+    fs31.renameSync(tmpPath, absPath);
     return true;
   }
   cacheKeyPrefix() {
@@ -8376,7 +8494,7 @@ var dispatchJobFileTicks = async (ctx, _profile, args) => {
     await backend.hydrate();
   }
   try {
-    const slugs = listJobSlugs(path28.join(ctx.cwd, jobsDir));
+    const slugs = listJobSlugs(path29.join(ctx.cwd, jobsDir));
     ctx.data.jobSlugCount = slugs.length;
     if (slugs.length === 0) {
       process.stdout.write(`[jobs] no job files in ${jobsDir}
@@ -8387,6 +8505,55 @@ var dispatchJobFileTicks = async (ctx, _profile, args) => {
 `);
     const results = [];
     const now = Date.now();
+    const scheduledDuties = listFolderDutySlugs(path29.join(ctx.cwd, jobsDir)).map((slug) => {
+      try {
+        const p = loadProfile(path29.join(ctx.cwd, jobsDir, slug, "profile.json"));
+        return { slug, every: p.every, staff: p.staff };
+      } catch (err) {
+        process.stderr.write(`[jobs] \u23ED  skip folder-duty ${slug}: profile load failed: ${String(err)}
+`);
+        return null;
+      }
+    }).filter((d) => d !== null && Boolean(d.every));
+    process.stdout.write(`[jobs] ${scheduledDuties.length} scheduled folder-dut(y/ies) to consider
+`);
+    for (const { slug, every, staff } of scheduledDuties) {
+      if (!staff || staff.trim().length === 0) {
+        process.stderr.write(`[jobs] \u23ED  skip ${slug}: scheduled duty has no staff
+`);
+        results.push({ slug, exitCode: 0, skipped: true, reason: "no staff assigned" });
+        continue;
+      }
+      const decision = await decideShouldFire(every, slug, backend, now);
+      if (decision.skip) {
+        process.stdout.write(`[jobs] \u23ED  skip ${slug}: ${decision.reason}
+`);
+        results.push({ slug, exitCode: 0, skipped: true, reason: decision.reason });
+        continue;
+      }
+      await stampFired(backend, slug, now);
+      process.stdout.write(`[jobs] \u2192 run scheduled duty ${slug} (one-shot, as ${staff})
+`);
+      try {
+        const out = await runExecutable(slug, {
+          cliArgs: {},
+          cwd: ctx.cwd,
+          config: ctx.config,
+          verbose: ctx.verbose,
+          quiet: ctx.quiet
+        });
+        results.push({ slug, exitCode: out.exitCode, reason: out.reason });
+        if (out.exitCode !== 0) {
+          process.stderr.write(`[jobs] scheduled duty ${slug} failed (exit ${out.exitCode}): ${out.reason ?? ""}
+`);
+        }
+      } catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        process.stderr.write(`[jobs] scheduled duty ${slug} crashed: ${msg}
+`);
+        results.push({ slug, exitCode: 99, reason: msg });
+      }
+    }
     for (const slug of slugs) {
       const frontmatter = readJobFrontmatter(ctx.cwd, jobsDir, slug);
       if (frontmatter.disabled === true) {
@@ -8487,22 +8654,42 @@ function formatAgo(ms) {
 }
 function readJobFrontmatter(cwd, jobsDir, slug) {
   try {
-    const raw = fs31.readFileSync(path28.join(cwd, jobsDir, `${slug}.md`), "utf-8");
-    return splitFrontmatter(raw).frontmatter;
+    const raw = fs32.readFileSync(path29.join(cwd, jobsDir, `${slug}.md`), "utf-8");
+    return splitFrontmatter2(raw).frontmatter;
   } catch {
     return {};
   }
 }
 function listJobSlugs(absDir) {
-  if (!fs31.existsSync(absDir)) return [];
+  if (!fs32.existsSync(absDir)) return [];
   let entries;
   try {
-    entries = fs31.readdirSync(absDir, { withFileTypes: true });
+    entries = fs32.readdirSync(absDir, { withFileTypes: true });
   } catch {
     return [];
   }
   return entries.filter((e) => e.isFile() && e.name.endsWith(".md")).map((e) => e.name.replace(/\.md$/, "")).filter((slug) => slug.length > 0 && !slug.startsWith("_") && !slug.startsWith(".")).sort();
 }
+function listFolderDutySlugs(absDir) {
+  if (!fs32.existsSync(absDir)) return [];
+  let entries;
+  try {
+    entries = fs32.readdirSync(absDir, { withFileTypes: true });
+  } catch {
+    return [];
+  }
+  return entries.filter((e) => e.isDirectory() && !e.name.startsWith("_") && !e.name.startsWith(".")).filter((e) => fs32.existsSync(path29.join(absDir, e.name, "profile.json"))).map((e) => e.name).sort();
+}
+async function stampFired(backend, slug, now) {
+  try {
+    const loaded = await backend.load(slug);
+    const nextData = { ...loaded.state.data ?? {}, lastFiredAt: new Date(now).toISOString() };
+    await backend.save(loaded, { ...loaded.state, data: nextData });
+  } catch (err) {
+    process.stderr.write(`[jobs] failed to stamp lastFiredAt for ${slug}: ${String(err)}
+`);
+  }
+}
 
 // src/scripts/dispatchJobTicks.ts
 init_issue();
@@ -9556,12 +9743,12 @@ var handleAbandonedGoal = async (ctx) => {
 
 // src/scripts/initFlow.ts
 import { execFileSync as execFileSync18 } from "child_process";
-import * as fs32 from "fs";
-import * as path29 from "path";
+import * as fs33 from "fs";
+import * as path30 from "path";
 function detectPackageManager(cwd) {
-  if (fs32.existsSync(path29.join(cwd, "pnpm-lock.yaml"))) return "pnpm";
-  if (fs32.existsSync(path29.join(cwd, "yarn.lock"))) return "yarn";
-  if (fs32.existsSync(path29.join(cwd, "bun.lockb"))) return "bun";
+  if (fs33.existsSync(path30.join(cwd, "pnpm-lock.yaml"))) return "pnpm";
+  if (fs33.existsSync(path30.join(cwd, "yarn.lock"))) return "yarn";
+  if (fs33.existsSync(path30.join(cwd, "bun.lockb"))) return "bun";
   return "npm";
 }
 function qualityCommandsFor(pm) {
@@ -9690,36 +9877,36 @@ function performInit(cwd, force) {
   const pm = detectPackageManager(cwd);
   const ownerRepo = detectOwnerRepo(cwd);
   const defaultBranch2 = defaultBranchFromGit(cwd);
-  const configPath = path29.join(cwd, "kody.config.json");
-  if (fs32.existsSync(configPath) && !force) {
+  const configPath = path30.join(cwd, "kody.config.json");
+  if (fs33.existsSync(configPath) && !force) {
     skipped.push("kody.config.json");
   } else {
     const cfg = makeConfig(pm, ownerRepo, defaultBranch2);
-    fs32.writeFileSync(configPath, `${JSON.stringify(cfg, null, 2)}
+    fs33.writeFileSync(configPath, `${JSON.stringify(cfg, null, 2)}
 `);
     wrote.push("kody.config.json");
   }
-  const workflowDir = path29.join(cwd, ".github", "workflows");
-  const workflowPath = path29.join(workflowDir, "kody.yml");
-  if (fs32.existsSync(workflowPath) && !force) {
+  const workflowDir = path30.join(cwd, ".github", "workflows");
+  const workflowPath = path30.join(workflowDir, "kody.yml");
+  if (fs33.existsSync(workflowPath) && !force) {
     skipped.push(".github/workflows/kody.yml");
   } else {
-    fs32.mkdirSync(workflowDir, { recursive: true });
-    fs32.writeFileSync(workflowPath, WORKFLOW_TEMPLATE);
+    fs33.mkdirSync(workflowDir, { recursive: true });
+    fs33.writeFileSync(workflowPath, WORKFLOW_TEMPLATE);
     wrote.push(".github/workflows/kody.yml");
   }
   const builtinJobs = listBuiltinJobs();
   if (builtinJobs.length > 0) {
-    const jobsDir = path29.join(cwd, ".kody", "duties");
-    fs32.mkdirSync(jobsDir, { recursive: true });
+    const jobsDir = path30.join(cwd, ".kody", "duties");
+    fs33.mkdirSync(jobsDir, { recursive: true });
     for (const job of builtinJobs) {
-      const rel = path29.join(".kody", "duties", `${job.slug}.md`);
-      const target = path29.join(cwd, rel);
-      if (fs32.existsSync(target) && !force) {
+      const rel = path30.join(".kody", "duties", `${job.slug}.md`);
+      const target = path30.join(cwd, rel);
+      if (fs33.existsSync(target) && !force) {
         skipped.push(rel);
         continue;
       }
-      fs32.writeFileSync(target, fs32.readFileSync(job.filePath, "utf-8"));
+      fs33.writeFileSync(target, fs33.readFileSync(job.filePath, "utf-8"));
       wrote.push(rel);
     }
   }
@@ -9731,12 +9918,12 @@ function performInit(cwd, force) {
       continue;
     }
     if (profile.kind !== "scheduled" || !profile.schedule) continue;
-    const target = path29.join(workflowDir, `kody-${exe.name}.yml`);
-    if (fs32.existsSync(target) && !force) {
+    const target = path30.join(workflowDir, `kody-${exe.name}.yml`);
+    if (fs33.existsSync(target) && !force) {
       skipped.push(`.github/workflows/kody-${exe.name}.yml`);
       continue;
     }
-    fs32.writeFileSync(target, renderScheduledWorkflow(exe.name, profile.schedule));
+    fs33.writeFileSync(target, renderScheduledWorkflow(exe.name, profile.schedule));
     wrote.push(`.github/workflows/kody-${exe.name}.yml`);
   }
   let labels;
@@ -9921,8 +10108,8 @@ var loadIssueStateComment = async (ctx, _profile, args) => {
 
 // src/scripts/loadJobFromFile.ts
 init_dutyMcp();
-import * as fs33 from "fs";
-import * as path30 from "path";
+import * as fs34 from "fs";
+import * as path31 from "path";
 var DUTY_TOOL_PALETTE = new Set(DUTY_MCP_TOOL_NAMES);
 var loadJobFromFile = async (ctx, profile, args) => {
   const jobsDir = String(args?.jobsDir ?? ".kody/duties");
@@ -9932,23 +10119,23 @@ var loadJobFromFile = async (ctx, profile, args) => {
   if (!slug) {
     throw new Error(`loadJobFromFile: ctx.args.${slugArg} must be a non-empty slug`);
   }
-  const absPath = path30.join(ctx.cwd, jobsDir, `${slug}.md`);
-  if (!fs33.existsSync(absPath)) {
+  const absPath = path31.join(ctx.cwd, jobsDir, `${slug}.md`);
+  if (!fs34.existsSync(absPath)) {
     throw new Error(`loadJobFromFile: job file not found: ${absPath}`);
   }
-  const raw = fs33.readFileSync(absPath, "utf-8");
+  const raw = fs34.readFileSync(absPath, "utf-8");
   const { title, body } = parseJobFile(raw, slug);
-  const frontmatter = splitFrontmatter(raw).frontmatter;
+  const frontmatter = splitFrontmatter2(raw).frontmatter;
   const mentions = (frontmatter.mentions ?? []).map((login) => `@${login}`).join(" ");
   const workerSlug = (frontmatter.staff ?? "").trim();
   let workerTitle = "";
   let workerPersona = "";
   if (workerSlug) {
-    const workerPath = path30.join(ctx.cwd, workersDir, `${workerSlug}.md`);
-    if (!fs33.existsSync(workerPath)) {
+    const workerPath = path31.join(ctx.cwd, workersDir, `${workerSlug}.md`);
+    if (!fs34.existsSync(workerPath)) {
       throw new Error(`loadJobFromFile: duty '${slug}' declares staff '${workerSlug}' but ${workerPath} does not exist`);
     }
-    const workerRaw = fs33.readFileSync(workerPath, "utf-8");
+    const workerRaw = fs34.readFileSync(workerPath, "utf-8");
     const parsed = parseJobFile(workerRaw, workerSlug);
     workerTitle = parsed.title;
     workerPersona = parsed.body;
@@ -10001,6 +10188,36 @@ function humanizeSlug(slug) {
   return slug.split(/[-_]+/).filter((s) => s.length > 0).map((s) => s[0].toUpperCase() + s.slice(1)).join(" ");
 }
 
+// src/scripts/loadDutyState.ts
+init_dutyMcp();
+var DUTY_TOOL_PALETTE2 = new Set(DUTY_MCP_TOOL_NAMES);
+var loadDutyState = async (ctx, profile, args) => {
+  const jobsDir = String(args?.jobsDir ?? ".kody/duties");
+  const slug = profile.name;
+  const backend = resolveBackend({ config: ctx.config, cwd: ctx.cwd, jobsDir });
+  if (backend.hydrate) await backend.hydrate();
+  const loaded = await backend.load(slug);
+  ctx.data.jobSlug = slug;
+  ctx.data.jobState = loaded;
+  ctx.data.jobStateJson = JSON.stringify(loaded.state, null, 2);
+  const mentions = (profile.mentions ?? []).map((l) => `@${l}`).join(" ");
+  ctx.data.mentions = mentions;
+  const declaredTools = profile.dutyTools ?? [];
+  if (declaredTools.length > 0) {
+    const unknown = declaredTools.filter((name) => !DUTY_TOOL_PALETTE2.has(name));
+    if (unknown.length > 0) {
+      throw new Error(
+        `loadDutyState: duty '${slug}' declared dutyTools not in the kody-duty palette: ${unknown.join(", ")}. Available: ${[...DUTY_MCP_TOOL_NAMES].join(", ")}`
+      );
+    }
+    ctx.data.dutyTools = declaredTools;
+    ctx.data.dutyToolsList = declaredTools.map((name) => `- \`${name}\``).join("\n");
+    ctx.data.dutyOperatorMention = mentions;
+    const mcpToolNames = declaredTools.map((name) => `mcp__kody-duty__${name}`);
+    profile.claudeCode.tools = [...mcpToolNames, "mcp__kody-submit__submit_state"];
+  }
+};
+
 // src/scripts/loadLinkedFinding.ts
 init_issue();
 var FINDING_BODY_MAX_BYTES = 4e3;
@@ -10032,18 +10249,18 @@ init_loadMemoryContext();
 init_loadPriorArt();
 
 // src/scripts/loadQaContext.ts
-import * as fs35 from "fs";
-import * as path32 from "path";
+import * as fs36 from "fs";
+import * as path33 from "path";
 
 // src/scripts/kodyVariables.ts
-import * as fs34 from "fs";
-import * as path31 from "path";
+import * as fs35 from "fs";
+import * as path32 from "path";
 var KODY_VARIABLES_REL_PATH = ".kody/variables.json";
 function readKodyVariables(cwd) {
-  const full = path31.join(cwd, KODY_VARIABLES_REL_PATH);
+  const full = path32.join(cwd, KODY_VARIABLES_REL_PATH);
   let raw;
   try {
-    raw = fs34.readFileSync(full, "utf-8");
+    raw = fs35.readFileSync(full, "utf-8");
   } catch {
     return {};
   }
@@ -10094,18 +10311,18 @@ function readProfileStaff(raw) {
   return { staff: staff ?? legacy ?? ["kody"], body };
 }
 function readProfile(cwd) {
-  const dir = path32.join(cwd, CONTEXT_DIR_REL_PATH);
-  if (!fs35.existsSync(dir)) return "";
+  const dir = path33.join(cwd, CONTEXT_DIR_REL_PATH);
+  if (!fs36.existsSync(dir)) return "";
   let entries;
   try {
-    entries = fs35.readdirSync(dir).filter((f) => f.endsWith(".md")).sort();
+    entries = fs36.readdirSync(dir).filter((f) => f.endsWith(".md")).sort();
   } catch {
     return "";
   }
   const blocks = [];
   for (const file of entries) {
     try {
-      const raw = fs35.readFileSync(path32.join(dir, file), "utf-8");
+      const raw = fs36.readFileSync(path33.join(dir, file), "utf-8");
       const { staff, body } = readProfileStaff(raw);
       if (!staff.includes(QA_STAFF) && !staff.includes(ALL_STAFF)) continue;
       blocks.push(`## ${file}
@@ -10142,8 +10359,8 @@ var loadQaContext = async (ctx) => {
 init_events();
 
 // src/taskContext.ts
-import * as fs36 from "fs";
-import * as path33 from "path";
+import * as fs37 from "fs";
+import * as path34 from "path";
 var TASK_CONTEXT_SCHEMA_VERSION = 1;
 function buildTaskContext(args) {
   return {
@@ -10159,10 +10376,10 @@ function buildTaskContext(args) {
 }
 function persistTaskContext(cwd, ctx) {
   try {
-    const dir = path33.join(cwd, ".kody", "runs", ctx.runId);
-    fs36.mkdirSync(dir, { recursive: true });
-    const file = path33.join(dir, "task-context.json");
-    fs36.writeFileSync(file, `${JSON.stringify(ctx, null, 2)}
+    const dir = path34.join(cwd, ".kody", "runs", ctx.runId);
+    fs37.mkdirSync(dir, { recursive: true });
+    const file = path34.join(dir, "task-context.json");
+    fs37.writeFileSync(file, `${JSON.stringify(ctx, null, 2)}
 `);
     return file;
   } catch (err) {
@@ -10228,19 +10445,19 @@ var loadTaskState = async (ctx) => {
 };
 
 // src/scripts/loadWorkerAdhoc.ts
-import * as fs37 from "fs";
-import * as path34 from "path";
+import * as fs38 from "fs";
+import * as path35 from "path";
 var loadWorkerAdhoc = async (ctx, _profile, args) => {
   const workersDir = String(args?.workersDir ?? ".kody/staff");
   const workerSlug = String(ctx.args.worker ?? "").trim();
   if (!workerSlug) {
     throw new Error("loadWorkerAdhoc: ctx.args.worker must be a non-empty slug");
   }
-  const workerPath = path34.join(ctx.cwd, workersDir, `${workerSlug}.md`);
-  if (!fs37.existsSync(workerPath)) {
+  const workerPath = path35.join(ctx.cwd, workersDir, `${workerSlug}.md`);
+  if (!fs38.existsSync(workerPath)) {
     throw new Error(`loadWorkerAdhoc: worker persona not found: ${workerPath}`);
   }
-  const { title, body } = parsePersona(fs37.readFileSync(workerPath, "utf-8"), workerSlug);
+  const { title, body } = parsePersona(fs38.readFileSync(workerPath, "utf-8"), workerSlug);
   const message = resolveMessage(ctx.args.message);
   if (!message) {
     throw new Error(
@@ -10260,9 +10477,9 @@ function resolveMessage(messageArg) {
 }
 function readCommentBody() {
   const eventPath = process.env.GITHUB_EVENT_PATH;
-  if (!eventPath || !fs37.existsSync(eventPath)) return "";
+  if (!eventPath || !fs38.existsSync(eventPath)) return "";
   try {
-    const event = JSON.parse(fs37.readFileSync(eventPath, "utf-8"));
+    const event = JSON.parse(fs38.readFileSync(eventPath, "utf-8"));
     return String(event.comment?.body ?? "");
   } catch {
     return "";
@@ -10286,7 +10503,7 @@ function stripDirective(body) {
   return lines.slice(start).join("\n").trim();
 }
 function parsePersona(raw, slug) {
-  const stripped = splitFrontmatter(raw).body;
+  const stripped = splitFrontmatter2(raw).body;
   const trimmed = stripped.trim();
   const firstLine2 = trimmed.split("\n", 1)[0] ?? "";
   const h1 = /^#\s+(.+?)\s*$/.exec(firstLine2);
@@ -10993,8 +11210,8 @@ var FlyClient = class {
   get fetch() {
     return this.opts.fetchImpl ?? fetch;
   }
-  async call(path41, init = {}) {
-    const res = await this.fetch(`${FLY_API_BASE}${path41}`, {
+  async call(path42, init = {}) {
+    const res = await this.fetch(`${FLY_API_BASE}${path42}`, {
       method: init.method ?? "GET",
       headers: {
         Authorization: `Bearer ${this.opts.token}`,
@@ -11005,7 +11222,7 @@ var FlyClient = class {
     if (res.status === 404 && init.allow404) return null;
     if (!res.ok) {
       const text = await res.text().catch(() => "");
-      throw new Error(`Fly API ${res.status} on ${path41}: ${text.slice(0, 200) || res.statusText}`);
+      throw new Error(`Fly API ${res.status} on ${path42}: ${text.slice(0, 200) || res.statusText}`);
     }
     if (res.status === 204) return null;
     const raw = await res.text();
@@ -12581,7 +12798,7 @@ function resolveBaseOverride(value) {
 
 // src/scripts/runnerServe.ts
 import { spawn as spawn5 } from "child_process";
-import * as fs38 from "fs";
+import * as fs39 from "fs";
 import { createServer as createServer3 } from "http";
 var DEFAULT_PORT2 = 8080;
 var DEFAULT_WORKDIR = "/workspace/repo";
@@ -12661,8 +12878,8 @@ async function defaultRunJob(job) {
   const workdir = process.env.RUNNER_WORKDIR ?? DEFAULT_WORKDIR;
   const branch = job.ref ?? "main";
   const authUrl = `https://x-access-token:${job.githubToken}@github.com/${job.repo}.git`;
-  fs38.rmSync(workdir, { recursive: true, force: true });
-  fs38.mkdirSync(workdir, { recursive: true });
+  fs39.rmSync(workdir, { recursive: true, force: true });
+  fs39.mkdirSync(workdir, { recursive: true });
   const allSecrets = typeof job.allSecrets === "string" ? job.allSecrets : JSON.stringify(job.allSecrets ?? {});
   const interactive = job.mode === "interactive";
   const scheduled = job.mode === "scheduled";
@@ -12795,7 +13012,7 @@ var runnerServe = async (ctx) => {
 
 // src/scripts/runPreviewBuild.ts
 import { copyFile, writeFile } from "fs/promises";
-import * as path35 from "path";
+import * as path36 from "path";
 import { fileURLToPath } from "url";
 
 // src/scripts/previewBuildHelpers.ts
@@ -12944,9 +13161,9 @@ var FLY_MACHINES = "https://api.machines.dev/v1";
 var FLY_GRAPHQL = "https://api.fly.io/graphql";
 var REQ_TIMEOUT_MS2 = 3e4;
 function bundledDockerfilePath(mode) {
-  const here = path35.dirname(fileURLToPath(import.meta.url));
+  const here = path36.dirname(fileURLToPath(import.meta.url));
   const file = mode === "dev" ? "default-Dockerfile.preview.dev" : "default-Dockerfile.preview.prod";
-  return path35.join(here, "preview-build-templates", file);
+  return path36.join(here, "preview-build-templates", file);
 }
 function required(name) {
   const v = (process.env[name] ?? "").trim();
@@ -13195,10 +13412,10 @@ var runPreviewBuild = async (ctx, _profile, _args) => {
     console.log(`[preview-build] vault: ${Object.keys(buildEnv).length} secrets, mode=${buildMode}`);
     if (Object.keys(buildEnv).length > 0) {
       const lines = Object.entries(buildEnv).map(([k, v]) => `${k}=${JSON.stringify(v)}`);
-      await writeFile(path35.join(ctx.cwd, ".env.production.local"), `${lines.join("\n")}
+      await writeFile(path36.join(ctx.cwd, ".env.production.local"), `${lines.join("\n")}
 `, "utf8");
     }
-    const consumerDockerfile = path35.join(ctx.cwd, "Dockerfile.preview");
+    const consumerDockerfile = path36.join(ctx.cwd, "Dockerfile.preview");
     const { stat } = await import("fs/promises");
     let hasConsumerDockerfile = false;
     try {
@@ -13298,8 +13515,8 @@ var runPreviewBuild = async (ctx, _profile, _args) => {
 
 // src/scripts/runTickScript.ts
 import { spawnSync as spawnSync2 } from "child_process";
-import * as fs39 from "fs";
-import * as path36 from "path";
+import * as fs40 from "fs";
+import * as path37 from "path";
 var runTickScript = async (ctx, _profile, args) => {
   ctx.skipAgent = true;
   const jobsDir = String(args?.jobsDir ?? ".kody/duties");
@@ -13311,22 +13528,22 @@ var runTickScript = async (ctx, _profile, args) => {
     ctx.output.reason = `runTickScript: ctx.args.${slugArg} must be a non-empty slug`;
     return;
   }
-  const jobPath = path36.join(ctx.cwd, jobsDir, `${slug}.md`);
-  if (!fs39.existsSync(jobPath)) {
+  const jobPath = path37.join(ctx.cwd, jobsDir, `${slug}.md`);
+  if (!fs40.existsSync(jobPath)) {
     ctx.output.exitCode = 99;
     ctx.output.reason = `runTickScript: job file not found: ${jobPath}`;
     return;
   }
-  const raw = fs39.readFileSync(jobPath, "utf-8");
-  const { frontmatter } = splitFrontmatter(raw);
+  const raw = fs40.readFileSync(jobPath, "utf-8");
+  const { frontmatter } = splitFrontmatter2(raw);
   const tickScript = frontmatter.tickScript;
   if (!tickScript) {
     ctx.output.exitCode = 99;
     ctx.output.reason = `runTickScript: job ${slug} has no \`tickScript:\` frontmatter \u2014 route via job-tick instead`;
     return;
   }
-  const scriptPath = path36.isAbsolute(tickScript) ? tickScript : path36.join(ctx.cwd, tickScript);
-  if (!fs39.existsSync(scriptPath)) {
+  const scriptPath = path37.isAbsolute(tickScript) ? tickScript : path37.join(ctx.cwd, tickScript);
+  if (!fs40.existsSync(scriptPath)) {
     ctx.output.exitCode = 99;
     ctx.output.reason = `runTickScript: tickScript not found: ${scriptPath}`;
     return;
@@ -13455,7 +13672,7 @@ var saveTaskState = async (ctx, profile) => {
   if (!target || !number || !state) return;
   const executable = profile.name;
   const action = ctx.data.action ?? synthesizeAction(ctx);
-  const next = reduce(state, executable, action, profile.phase);
+  const next = reduce(state, executable, action, profile.phase, profile.staff);
   if (ctx.output.prUrl) next.core.prUrl = ctx.output.prUrl;
   if (typeof ctx.data.runUrl === "string") next.core.runUrl = ctx.data.runUrl;
   writeTaskState(target, number, next, ctx.cwd);
@@ -14372,7 +14589,7 @@ var writeJobStateFile = async (ctx, _profile, agentResult, args) => {
 };
 
 // src/scripts/writeRunSummary.ts
-import * as fs40 from "fs";
+import * as fs41 from "fs";
 var writeRunSummary = async (ctx, profile) => {
   const summaryPath = process.env.GITHUB_STEP_SUMMARY;
   if (!summaryPath) return;
@@ -14394,7 +14611,7 @@ var writeRunSummary = async (ctx, profile) => {
   if (reason) lines.push(`- **Reason:** ${reason}`);
   lines.push("");
   try {
-    fs40.appendFileSync(summaryPath, `${lines.join("\n")}
+    fs41.appendFileSync(summaryPath, `${lines.join("\n")}
 `);
   } catch {
   }
@@ -14416,6 +14633,7 @@ var preflightScripts = {
   loadIssueContext,
   loadIssueStateComment,
   loadJobFromFile,
+  loadDutyState,
   loadWorkerAdhoc,
   loadConventions,
   loadCoverageRules,
@@ -14501,46 +14719,36 @@ var allScriptNames = /* @__PURE__ */ new Set([
   ...Object.keys(postflightScripts)
 ]);
 
-// src/subagents.ts
-import * as fs41 from "fs";
-import * as path37 from "path";
-function splitFrontmatter2(raw) {
-  const match = /^---\n([\s\S]*?)\n---\n?([\s\S]*)$/.exec(raw);
-  if (!match) return { fm: {}, body: raw.trim() };
-  const fm = {};
-  for (const line of match[1].split("\n")) {
-    const idx = line.indexOf(":");
-    if (idx === -1) continue;
-    fm[line.slice(0, idx).trim()] = line.slice(idx + 1).trim();
-  }
-  return { fm, body: (match[2] ?? "").trim() };
-}
-function resolveAgentFile(profileDir, name) {
-  const local = path37.join(profileDir, "agents", `${name}.md`);
-  if (fs41.existsSync(local)) return local;
-  const central = path37.join(getPluginsCatalogRoot(), "agents", `${name}.md`);
-  if (fs41.existsSync(central)) return central;
-  throw new Error(`loadSubagents: agent '${name}' not found in ${profileDir}/agents/ or shared catalog`);
-}
-function loadSubagents(profile) {
-  const names = profile.claudeCode.subagents;
-  if (!names || names.length === 0) return void 0;
-  const agents = {};
-  for (const name of names) {
-    const { fm, body } = splitFrontmatter2(fs41.readFileSync(resolveAgentFile(profile.dir, name), "utf-8"));
-    if (!body) throw new Error(`loadSubagents: agent '${name}' has an empty prompt body`);
-    const def = {
-      description: fm.description ?? `Subagent ${name}`,
-      prompt: body
-    };
-    if (fm.tools) {
-      const tools = fm.tools.split(",").map((t) => t.trim()).filter(Boolean);
-      if (tools.length > 0) def.tools = tools;
-    }
-    if (fm.model) def.model = fm.model;
-    agents[fm.name || name] = def;
-  }
-  return agents;
+// src/staff.ts
+import * as fs42 from "fs";
+import * as path38 from "path";
+var DEFAULT_STAFF_DIR = ".kody/staff";
+function stripFrontmatter(raw) {
+  const match = /^---\n[\s\S]*?\n---\n?([\s\S]*)$/.exec(raw);
+  return (match ? match[1] : raw).trim();
+}
+function loadStaffPersona(cwd, slug, staffDir = DEFAULT_STAFF_DIR) {
+  const trimmed = slug.trim();
+  if (!trimmed) throw new Error("loadStaffPersona: empty staff slug");
+  const staffPath = path38.join(cwd, staffDir, `${trimmed}.md`);
+  if (!fs42.existsSync(staffPath)) {
+    throw new Error(`loadStaffPersona: staff '${trimmed}' declared but ${staffPath} does not exist`);
+  }
+  const body = stripFrontmatter(fs42.readFileSync(staffPath, "utf-8"));
+  if (!body) throw new Error(`loadStaffPersona: staff '${trimmed}' persona body is empty (${staffPath})`);
+  return body;
+}
+function framePersona(slug, persona) {
+  return [
+    `## Who you are \u2014 staff persona (authoritative identity)`,
+    ``,
+    `You are operating as staff member \`${slug}\`. This persona defines *who* you are:`,
+    `your authority, doctrine, voice, and hard limits. Honour it exactly. Where the`,
+    `persona's restrictions are stricter than the task, **the persona wins** \u2014 a task`,
+    `can never grant you authority your persona withholds.`,
+    ``,
+    persona
+  ].join("\n");
 }
 
 // src/tools.ts
@@ -14715,9 +14923,10 @@ async function runExecutable(profileName, input) {
       })
     };
   })() : null;
-  const ndjsonDir = path38.join(input.cwd, ".kody");
+  const ndjsonDir = path39.join(input.cwd, ".kody");
+  const staffPersona = typeof profile.staff === "string" && profile.staff.length > 0 ? framePersona(profile.staff, loadStaffPersona(input.cwd, profile.staff)) : null;
   const invokeAgent = async (prompt) => {
-    const externalPlugins = (profile.claudeCode.plugins ?? []).map((p) => path38.isAbsolute(p) ? p : path38.resolve(profile.dir, p)).filter((p) => p.length > 0);
+    const externalPlugins = (profile.claudeCode.plugins ?? []).map((p) => path39.isAbsolute(p) ? p : path39.resolve(profile.dir, p)).filter((p) => p.length > 0);
     const syntheticPath = ctx.data.syntheticPluginPath;
     const pluginPaths = [...externalPlugins, ...syntheticPath ? [syntheticPath] : []];
     const agents = loadSubagents(profile);
@@ -14746,7 +14955,7 @@ async function runExecutable(profileName, input) {
       maxTurnTimeoutMs: typeof profile.claudeCode.maxTurnTimeoutSec === "number" ? Math.floor(profile.claudeCode.maxTurnTimeoutSec * 1e3) : void 0,
       // DISCIPLINE leads so the stable, role-agnostic block sits at the front
       // of the cacheable system-prompt prefix; profile/task appends follow.
-      systemPromptAppend: [DISCIPLINE, profile.claudeCode.systemPromptAppend, taskArtifacts?.promptAddendum].filter((s) => typeof s === "string" && s.length > 0).join("\n\n") || void 0,
+      systemPromptAppend: [DISCIPLINE, staffPersona, profile.claudeCode.systemPromptAppend, taskArtifacts?.promptAddendum].filter((s) => typeof s === "string" && s.length > 0).join("\n\n") || void 0,
       cacheable: profile.claudeCode.cacheable,
       enableVerifyTool: profile.claudeCode.enableVerifyTool,
       enableSubmitTool: profile.claudeCode.enableSubmitTool,
@@ -14986,17 +15195,17 @@ function clearStampedLifecycleLabels(profile, ctx) {
 function resolveProfilePath(profileName) {
   const found = resolveExecutable(profileName);
   if (found) return found;
-  const here = path38.dirname(new URL(import.meta.url).pathname);
+  const here = path39.dirname(new URL(import.meta.url).pathname);
   const candidates = [
-    path38.join(here, "executables", profileName, "profile.json"),
+    path39.join(here, "executables", profileName, "profile.json"),
     // same-dir sibling (dev)
-    path38.join(here, "..", "executables", profileName, "profile.json"),
+    path39.join(here, "..", "executables", profileName, "profile.json"),
     // up one (prod: dist/bin → dist/executables)
-    path38.join(here, "..", "src", "executables", profileName, "profile.json")
+    path39.join(here, "..", "src", "executables", profileName, "profile.json")
     // fallback
   ];
   for (const c of candidates) {
-    if (fs42.existsSync(c)) return c;
+    if (fs43.existsSync(c)) return c;
   }
   return candidates[0];
 }
@@ -15096,8 +15305,8 @@ function resolveShellTimeoutMs(entry) {
 var SIGKILL_GRACE_MS = 5e3;
 async function runShellEntry(entry, ctx, profile) {
   const shellName = entry.shell;
-  const shellPath = path38.join(profile.dir, shellName);
-  if (!fs42.existsSync(shellPath)) {
+  const shellPath = path39.join(profile.dir, shellName);
+  if (!fs43.existsSync(shellPath)) {
     ctx.skipAgent = true;
     ctx.output.exitCode = 99;
     ctx.output.reason = `shell script not found: ${shellName} (looked in ${profile.dir})`;
@@ -15332,9 +15541,9 @@ async function resolveAuthToken(env = process.env) {
   return void 0;
 }
 function detectPackageManager2(cwd) {
-  if (fs43.existsSync(path39.join(cwd, "pnpm-lock.yaml"))) return "pnpm";
-  if (fs43.existsSync(path39.join(cwd, "yarn.lock"))) return "yarn";
-  if (fs43.existsSync(path39.join(cwd, "bun.lockb"))) return "bun";
+  if (fs44.existsSync(path40.join(cwd, "pnpm-lock.yaml"))) return "pnpm";
+  if (fs44.existsSync(path40.join(cwd, "yarn.lock"))) return "yarn";
+  if (fs44.existsSync(path40.join(cwd, "bun.lockb"))) return "bun";
   return "npm";
 }
 function shellOut(cmd, args, cwd, stream = true) {
@@ -15421,11 +15630,11 @@ function configureGitIdentity(cwd) {
 }
 function postFailureTail(issueNumber, cwd, reason) {
   if (!issueNumber) return;
-  const logPath = path39.join(cwd, ".kody", "last-run.jsonl");
+  const logPath = path40.join(cwd, ".kody", "last-run.jsonl");
   let tail = "";
   try {
-    if (fs43.existsSync(logPath)) {
-      const content = fs43.readFileSync(logPath, "utf-8");
+    if (fs44.existsSync(logPath)) {
+      const content = fs44.readFileSync(logPath, "utf-8");
       tail = content.slice(-3e3);
     }
   } catch {
@@ -15450,7 +15659,7 @@ async function runCi(argv) {
     return 0;
   }
   const args = parseCiArgs(argv);
-  const cwd = args.cwd ? path39.resolve(args.cwd) : process.cwd();
+  const cwd = args.cwd ? path40.resolve(args.cwd) : process.cwd();
   let earlyConfig;
   try {
     earlyConfig = loadConfig(cwd);
@@ -15460,16 +15669,63 @@ async function runCi(argv) {
   const eventName = process.env.GITHUB_EVENT_NAME;
   const dispatchEventPath = process.env.GITHUB_EVENT_PATH;
   let manualWorkflowDispatch = false;
-  if (!args.issueNumber && !autoFallback && eventName === "workflow_dispatch" && dispatchEventPath && fs43.existsSync(dispatchEventPath)) {
+  let forceRunDuty = null;
+  if (!args.issueNumber && !autoFallback && eventName === "workflow_dispatch" && dispatchEventPath && fs44.existsSync(dispatchEventPath)) {
     try {
-      const evt = JSON.parse(fs43.readFileSync(dispatchEventPath, "utf-8"));
+      const evt = JSON.parse(fs44.readFileSync(dispatchEventPath, "utf-8"));
       const issueInput = parseInt(String(evt?.inputs?.issue_number ?? ""), 10);
       const sessionInput = String(evt?.inputs?.sessionId ?? "");
-      manualWorkflowDispatch = !sessionInput && !(Number.isFinite(issueInput) && issueInput > 0);
+      const exeInput = String(evt?.inputs?.executable ?? "").trim();
+      const noTarget = !sessionInput && !(Number.isFinite(issueInput) && issueInput > 0);
+      if (noTarget && exeInput) forceRunDuty = exeInput;
+      else manualWorkflowDispatch = noTarget;
     } catch {
       manualWorkflowDispatch = false;
     }
   }
+  if (forceRunDuty) {
+    const config = earlyConfig ?? loadConfig(cwd);
+    process.stdout.write(`\u2192 kody: manual one-shot run of duty ${forceRunDuty}
+
+`);
+    try {
+      const n = unpackAllSecrets();
+      if (n > 0) process.stdout.write(`\u2192 kody: unpacked ${n} secret(s)
+`);
+      await resolveAuthToken();
+      const pm = args.packageManager ?? detectPackageManager2(cwd);
+      if (!args.skipInstall) {
+        const code = installDeps(pm, cwd);
+        if (code !== 0) {
+          process.stderr.write(`[kody] dependency install failed (exit ${code})
+`);
+          return 99;
+        }
+      }
+      if (!args.skipLitellm) {
+        const code = installLitellmIfNeeded(cwd);
+        if (code !== 0) {
+          process.stderr.write(`[kody] litellm install failed (exit ${code})
+`);
+          return 99;
+        }
+      }
+      configureGitIdentity(cwd);
+    } catch (err) {
+      process.stderr.write(`[kody] manual duty preflight crashed: ${String(err)}
+`);
+      return 99;
+    }
+    const result = await runExecutableChain(forceRunDuty, {
+      cliArgs: {},
+      cwd,
+      config,
+      verbose: args.verbose,
+      quiet: args.quiet
+    });
+    const ec = result.exitCode;
+    return ec === 0 || ec === 1 || ec === 2 ? ec : 99;
+  }
   if (!args.issueNumber && !autoFallback && (eventName === "schedule" || manualWorkflowDispatch)) {
     return runScheduledFanOut(cwd, args, { force: manualWorkflowDispatch });
   }
@@ -15728,12 +15984,12 @@ function parseChatArgs(argv, env = process.env) {
   return result;
 }
 function commitChatFiles(cwd, sessionId, verbose) {
-  const sessionFile = path40.relative(cwd, sessionFilePath(cwd, sessionId));
-  const eventsFile = path40.relative(cwd, eventsFilePath(cwd, sessionId));
+  const sessionFile = path41.relative(cwd, sessionFilePath(cwd, sessionId));
+  const eventsFile = path41.relative(cwd, eventsFilePath(cwd, sessionId));
   const safeSession = sessionId.replace(/[^a-zA-Z0-9._-]/g, "_");
-  const tasksDir = path40.join(".kody", "tasks", safeSession);
+  const tasksDir = path41.join(".kody", "tasks", safeSession);
   const candidatePaths = [sessionFile, eventsFile, tasksDir];
-  const paths = candidatePaths.filter((p) => fs44.existsSync(path40.join(cwd, p)));
+  const paths = candidatePaths.filter((p) => fs45.existsSync(path41.join(cwd, p)));
   if (paths.length === 0) return;
   const opts = { cwd, stdio: verbose ? "inherit" : "pipe" };
   try {
@@ -15777,7 +16033,7 @@ async function runChat(argv) {
 ${CHAT_HELP}`);
     return 64;
   }
-  const cwd = args.cwd ? path40.resolve(args.cwd) : process.cwd();
+  const cwd = args.cwd ? path41.resolve(args.cwd) : process.cwd();
   const sessionId = args.sessionId;
   const unpackedSecrets = unpackAllSecrets();
   if (unpackedSecrets > 0) {
@@ -15829,7 +16085,7 @@ ${CHAT_HELP}`);
   const sink = buildSink(cwd, sessionId, args.dashboardUrl);
   const meta = readMeta(sessionFile);
   process.stdout.write(
-    `\u2192 kody:chat: session file=${sessionFile} exists=${fs44.existsSync(sessionFile)} meta=${meta ? meta.mode : "none"}
+    `\u2192 kody:chat: session file=${sessionFile} exists=${fs45.existsSync(sessionFile)} meta=${meta ? meta.mode : "none"}
 `
   );
   try {